WordPress Exploitation Confirmed; Stolen App Secrets Open Cloud Tenants
Thursday, November 5, 2026 · 8 min
WordPress attackers are exploiting a core upgrade flaw, prompting a federal patch deadline. Separately, Todyl reports stolen application credentials enabled access to 27 organizations through managed service providers, exposing the reach of trusted software identities without exploiting a Microsoft vulnerability.
Listen
Show notes
WordPress attackers are exploiting a core upgrade flaw, prompting a federal patch deadline. Separately, Todyl reports stolen application credentials enabled access to 27 organizations through managed service providers, exposing the reach of trusted software identities without exploiting a Microsoft vulnerability.
In this episode
- CISA flags WordPress RCE flaw as actively exploited in attacks — BleepingComputer
“The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild. Tracked as CVE-2026-119977, this high-severity WordPress Core flaw stems from a…”
- Stolen App Credentials, Real Access: An Actor Is Signing Into Entra ID and Azure DevOps as Your Workloads | Todyl — Todyl
“Since November 1, one operator has been signing in to MSPs' Microsoft 365 and Azure environments as their own applications, using stolen credentials that are still valid. About 45 app registrations at roughly 18 organizations were targeted, and more than 33 of them authenticated…”
- Zyxel fixes zero-day exploited to hack nearly 1,000 network switches — BleepingComputer
“Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. The vulnerability, tracked as CVE-2026-107441, is an out-of-bounds write flaw in…”
- Cyberattack disrupts blood storage refrigeration systems in France — BleepingComputer
“France's national blood service has confirmed that a cyberattack targeting a refrigeration equipment provider raised temperature and defrost settings at three of its facilities, threatening stored blood products. The French Blood Establishment (Établissement français du sang or…”