WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

The Hacker News - Sep 22, 2026

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some servers, that can go further, allowing the attacker to run their own code. The fix shipped on September 22 in WordPress 7.1.2, with fixes for every branch the project still supports, back to 4.7, and WordPress is telling site owners

Read full article

More News

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Sep 22, 2026

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," was first uploaded to the npm registry in mid-August 2026 by an npm account named "twdepprobe7731."

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Sep 22, 2026

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Sep 22, 2026

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), affects all versions of the Bifrost HTTP transport before 2.1.0 when management authentication is

The Big Threat Has Been Climate Change. Now Comes A.I.

Sep 22, 2026

The Big Threat Has Been Climate Change. Now Comes A.I.

Both are human-caused, both are frightening, and one of them has raced to the forefront of the global conversation.

Sea turtle laying eggs at Huntington Beach is first known instance of nesting on West Coast

Sep 22, 2026

Sea turtle laying eggs at Huntington Beach is first known instance of nesting on West Coast

At least one olive ridley sea turtle has laid its eggs on the sand in Huntington Beach.

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Sep 22, 2026

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Naceri, is a former Microsoft security researcher whose earlier Defender exploits were used in

C.T.E. Can’t Be Detected in the Living. New Brain Research Offers Hope.

Sep 22, 2026

C.T.E. Can’t Be Detected in the Living. New Brain Research Offers Hope.

Scientists are developing imaging techniques and blood tests that one day may enable doctors to identify the disease definitively in living patients.

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

Sep 22, 2026

Mathematics Isn’t Just a Game to Let A.I. Solve. History Shows Why.

In our field of applied mathematics, the long, human process of trial and error — not just the solutions themselves — is often what has led to progress.

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

Sep 22, 2026

Man vs robot: Influencer takes on 6ft humanoid in a terrifying cage fight - and it doesn't end well for him

It might sound like the plot of a bonkers sci-fi film, but the world has now witnessed the very first human vs robot boxing match.

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Sep 22, 2026

Gen Z are in a sex RECESSION, study reveals - with a fifth reporting they've never had a partner

Despite being the generation that grew up with Tinder, Hinge and Bumble at their fingertips, a study has revealed Gen Z is in a sex recession.

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

Sep 22, 2026

Call of Duty's Activision to make next Halo game as Xbox cuts more jobs

The news comes as part of a "reset" announced by Xbox in July, with 3,600 planned job losses overall.

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Sep 22, 2026

China’s Hygon moves beyond data centres with embedded processors for robotics, edge AI

Chinese chipmaker Hygon Information Technology on Tuesday launched a suite of central processing units (CPUs) for robotics and industrial edge devices, expanding beyond cloud computing and into the fast-growing market for physical artificial intelligence. The firm unveiled its Hygon 1000 series processors, designed to be embedded into physical devices in industrial automation systems such as robotics and factory controllers, enabling computing and graphics processing to be handled locally. Built...

Recommended

About Us
Logo

In-Depth Science delivers comprehensive and compelling news and analysis on everything science and technology, seven days a week in a reader-friendly format.

Contact us: sales[at]indepthscience.com

Copyright © 2015 - 2026 In-Depth Science. All Rights Reserved.