WordPress plugin suite hacked to push malware to thousands of sites

Published on April 15, 2026

More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows unauthorized access to websites running them. [...]

Continue reading on website
Other news

Signed software abused to deploy antivirus-killing scripts

April 15, 2026
A digitally signed adware tool has deployed payloads running with SYSTEM privileges that disabled antivirus protections on thousands of endpoints, some in the educational, utilities, government, and healthcare sectors. [...]

New AgingFly malware used in attacks on Ukraine govt, hospitals

April 15, 2026
A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal authentication data from Chromium-based browsers and WhatsApp messenger. [...]