FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation FBI said today it worked with industry partners to seize hundreds of domains associated with NetNut , a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum TechnologiesNASDAQ: ALAR. The action comes roughly two weeks after...

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Google has significantly degraded NetNut , one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat Intelligence Group GTIG said this week it had reduced the network's pool of usable devices by...

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail,...

CVE-2026-57670

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

WordPress Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations plugin <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ilkeggs in WordPress Plugin Trust.Reviews versions = 2.7.3...

CVE-2026-57670 WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

CVE-2026-57670

Technical details (affected plugin version specifics, root cause, exploit steps, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-13251

The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass

Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code via the sgcgoogleanalytic parameter that runs on all pages served by WordPress. The saveGoogleCode function in smartgooglecode.php does not check if the...

CVE-2026-13251

The CVE-2026-13251 entry concerns the WordPress Perfmatters plugin (

CVE-2026-14423

creationtimestamp| type| source ---|---|--- 2026-07-02 08:27:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116849916390659944 2026-07-02 10:30:29+00:00| seen|...

CVE-2026-14422

creationtimestamp| type| source ---|---|--- 2026-07-02 08:27:02+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 11:54:48+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqifqjzyz2f 2026-07-03 11:54:48+00:00| seen|...

CVE-2026-14421

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:49+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 15:38:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoehf5kgm27 2026-07-02 16:53:08+00:00| seen|...

CVE-2026-14418

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 15:38:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoegra3kx2r 2026-07-02 15:38:29+00:00| seen|...

CVE-2026-14415

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:29+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:38:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppwq4zxbu2i 2026-07-03 12:04:49+00:00| seen|...

CVE-2026-14414

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:58:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoiv2fzzw2y 2026-07-03 06:38:09+00:00| seen|...

CVE-2026-14413

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:23+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:29:06+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpohbc7zvi23 2026-07-02 16:29:07+00:00| seen|...

CVE-2026-14412

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:28:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohapohdu2y 2026-07-03 19:57:15+00:00| seen|...

CVE-2026-14411

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:01+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:30:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohe7hqvs2k 2026-07-02 21:26:06+00:00| seen|...

CVE-2026-14410

creationtimestamp| type| source ---|---|--- 2026-07-02 08:25:57+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:37:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppwovhuoa2y 2026-07-03 12:04:20+00:00| seen|...