CVE-2026-3300 on DanSec Daily

Cybersecurity Brief – 2026-06-07

Sun, 07 Jun 2026 00:00:00 +0000

Major Incidents or Breaches

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin, enabling attackers to take complete control of affected WordPress sites ^[2].
Hackers are using Meta’s AI bots to compromise Instagram accounts ^[4].

Newly Discovered Vulnerabilities

A critical flaw (CVE-2026-3300) has been identified in the Everest Forms Pro plugin for WordPress, which is currently being exploited in the wild ^[2].

Trends, Tools, or Tactics of Interest

OpenAI has introduced a new Lockdown Mode for eligible personal ChatGPT accounts to reduce the risk of data exfiltration from prompt injection attacks ^[1].
Chinese peptide laboratories, funded via cryptocurrency, are increasing in prevalence, indicating a trend of crypto-funded operations in this sector ^[4].

Regulatory or Policy Developments Affecting the Security Industry

Anthropic is reportedly providing support to NSA hackers, reflecting increased collaboration between AI firms and government intelligence agencies ^[4].

Sources

Critical Everest Forms Pro flaw exploited to take over WordPress sites - bleepingcomputer.com
Crypto-Funded Chinese Peptide Labs Are Booming - wired.com
New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration - thehackernews.com