Flaws, leaks, attacks and regulation. The one section where we do not joke.
3 articles
A critical Elementor Pro vulnerability, fixed on 19 August 2026, has been exploited since that same day to drop a webshell on WordPress sites. Wordfence says it blocked close to 200,000 attempts.
On 31 August, part of the traffic to Coder's registry was diverted to attacker-controlled servers handing out booby-trapped Terraform modules. Those modules went straight for the keys and tokens held by infrastructure teams.
France's CNIL has fined Hôpital privé de la Loire €500,000, a year after the data of 524,867 patients was exfiltrated. The ruling describes basic failures: no VPN, no two-factor authentication, no monitoring of access.
