News
Verizon publishes a Data Breach Investigations Report every spring. It's the closest thing the security industry has to an annual census, built from real incident data submitted by hundreds of organizations and law-enforcement partners. The 2026 edition dropped yesterday, and it announced something that hadn't happened
News
A WordPress plugin called Burst Statistics, installed on about 200,000 sites and marketed as a privacy-friendly alternative to Google Analytics, has a critical authentication-bypass flaw that lets attackers walk in as the site administrator. Wordfence discovered it on May 8th. A patch shipped May 12. As of about a
News
A critical Linux vulnerability called CopyFail just went public, and it is a bad one. A single script works across nearly every version of Linux to give an attacker full administrator access, no malware required. Most Linux distributions had not shipped the patch yet when the exploit code was released.