WordPress malware campaign hides payloads in Steam profiles

Steam "Offline" status leaks exact login timestamps (Valve: Won't Fix)

Analysis of CVE-2026-4020: Coordinated Google Cloud Fleet Exploiting Gravity SMTP WordPress Vulnerability

A detailed technical analysis of CVE-2026-4020, a critical vulnerability in the Gravity SMTP WordPress plugin that exposed sensitive credent

Malware spreading through Steam Workshop wallpapers targets gamers in China and Russia

Since late 2025, malware has been spreading through Steam Workshop via Wallpaper Engine's live wallpaper sharing feature. Attackers are targ

A new spam policy for "back button hijacking"

Large-Scale Supply Chain Attack: 30 WordPress Plugins Purchased and Backdoored

The article details a large-scale supply chain attack on WordPress plugins where an individual purchased 30 plugins and systematically plant

Supply Chain Attack Compromises Official GravityForms Plugin Repository

A supply chain attack compromised the official GravityForms plugin repository, injecting backdoors into legitimate plugin downloads. The bre