ShapedPlugin update flow hacked to infect WordPress sites

Published on June 18, 2026

Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected releases to paying customers via the vendor's official update system. [...]

Continue reading on website
Other news

Apple fixes Beats Studio Buds flaw that let hackers spy on conversations

June 18, 2026
Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allow attackers in Bluetooth range to spy on users' conversations. [...]

Police cleans nearly 15,000 SocGholish-infected sites tied to Evil Corp

June 18, 2026
International law enforcement agencies cleaned nearly 15,000 malware-infected WordPress websites and took down more than 100 servers linked to the SocGholish botnet and the Evil Corp Russian cybercrime group. [...]