Major Incidents or Breaches

  • Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin, enabling attackers to take complete control of affected WordPress sites [2].
  • Hackers are using Meta’s AI bots to compromise Instagram accounts [4].

Newly Discovered Vulnerabilities

  • A critical flaw (CVE-2026-3300) has been identified in the Everest Forms Pro plugin for WordPress, which is currently being exploited in the wild [2].

Trends, Tools, or Tactics of Interest

  • OpenAI has introduced a new Lockdown Mode for eligible personal ChatGPT accounts to reduce the risk of data exfiltration from prompt injection attacks [1].
  • Chinese peptide laboratories, funded via cryptocurrency, are increasing in prevalence, indicating a trend of crypto-funded operations in this sector [4].

Regulatory or Policy Developments Affecting the Security Industry

  • Anthropic is reportedly providing support to NSA hackers, reflecting increased collaboration between AI firms and government intelligence agencies [4].

Sources#

  1. Critical Everest Forms Pro flaw exploited to take over WordPress sites - bleepingcomputer.com
  2. Crypto-Funded Chinese Peptide Labs Are Booming - wired.com
  3. New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration - thehackernews.com