Avada Builder WordPress plugin flaws allow site credential theft

Published on May 15, 2026

Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files and extract sensitive information from the database. [...]

Continue reading on website
Other news

Microsoft Edge to stop loading cleartext passwords in memory on startup

May 15, 2026
Microsoft is updating the Edge web browser to ensure it no longer loads saved passwords into process memory in clear text at startup. [...]

Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access

May 15, 2026
The Russian state-sponsored hacking group known as Turla has transformed its custom backdoor Kazuar into a modular peer-to-peer (P2P) botnet that's engineered for stealth and persistent access to compromised hosts. Turla, per the U.S. Cybersecurity and Infrastructure Security Agency (CISA), is assessed to be affiliated with Center 16 of Russia's Federal Security Service (FSB)