Cybersecurity briefing, 2026-08-30

WordPress plugin flaws have widened into multiple site takeover paths, with critical issues now spanning WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP.

• FulcrumSec Turns MAG Breach Into Leak Threat
• TerminalFix Turns a Fake CAPTCHA Into Network Access
• WordPress Plugin Flaws Broaden Into Site Takeovers
• Hasbro Breach Exposes Payroll Fraud Risk
• Superior Weaponized Trusted Browser Extensions

Recent editions

• Saturday, August 29, 2026: GTIG Sees AI Speed Up Real Attacks · 14 stories
• Friday, August 28, 2026: PaperCut’s Exploit Chain Splits Into Two CVEs · 18 stories
• Thursday, August 27, 2026: TeamPCP Arrests Open a Forensic Phase · 17 stories
• Wednesday, August 26, 2026: miniOrange SAML Bugs Now See PoC Scanning · 16 stories
• Tuesday, August 25, 2026: miniOrange SAML Bugs Now See PoC Scanning · 17 stories
• Monday, August 24, 2026: Defender flaw now has a PoC and federal clock · 18 stories
• Sunday, August 23, 2026: BadBox Reaches Car Head Units Through DoFun Updaters · 3 stories