Australia warns of global campaign targeting vulnerable CMS platforms

Published on July 11, 2026

The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins. [...]

Continue reading on website
Other news

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

July 11, 2026
A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write every secret into the code as a list of numbers. [...]

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

July 11, 2026
Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China- and India-aligned threat actors between February 2024 and April 2026."At Balochistan Police, the compromised assets included servers hosting web applications that manage police and citizen data, such as criminal and