2026-06-07: WordPress site takeovers are spreading via a critical Everest Forms Pro exploit that creates rogue

Show Notes - 2026-06-07

Stories Covered

• 2026-06-07
• Today:
• Cisco SD-WAN Zero-Day Under Active Attack [Critical Alerts]
• Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites (CVE-2026-3300) [Critical Alerts]
• Exposed Fuel Tank Gauges Under Attack in the US [Critical Alerts]
• Adaptive AI Worms Loom as Next Enterprise Threat [Business & Infrastructure Threats]
• ChatGPT Lockdown Mode Limits Data Exfiltration Tools [Business & Infrastructure Threats]
• CVE-2026-3300: Everest Forms Pro Unauthenticated RCE [Vulnerability Disclosures]
• CVE-2026-50219: libexpat Use-After-Free Vulnerability [Vulnerability Disclosures]
• CVE-2026-8643: pip Path Traversal in Script Installation [Vulnerability Disclosures]
• CVE-2026-7774: Python tarfile Path Traversal Bypass [Vulnerability Disclosures]
• CVE-2026-11332: Ansible-core Argument Injection in ansible-galaxy [Vulnerability Disclosures]
• CVE-2026-3276: Python DoS via Quadratic Complexity in unicodedata.normalize() [Vulnerability Disclosures]
• CVE-2026-43958: RRDtool Stack Buffer Overflow [Vulnerability Disclosures]
• CVE-2026-10722: cilium eBPF Integer Overflow [Vulnerability Disclosures]
• CVE-2026-37460: FRRouting BGP DoS Vulnerability [Vulnerability Disclosures]
• CVE-2026-42504: Go mime Package Quadratic Complexity DoS [Vulnerability Disclosures]
• CVE-2026-42507: Go net/textproto Unescaped Input in Errors [Vulnerability Disclosures]
• CVE-2026-27145: Go Inefficient Hostname Parsing in crypto/x509 [Vulnerability Disclosures]
• CVE-2026-8829: Perl HTML::Entities Use-After-Free [Vulnerability Disclosures]
• CVE-2026-5419: GnuTLS Timing Side-Channel in PKCS#7 Padding [Vulnerability Disclosures]
• Opal Security Raises $23 Million for AI-Native Identity Governance [General Security News]

CVEs Referenced

CVE-2026-10722, CVE-2026-11332, CVE-2026-27145, CVE-2026-3276, CVE-2026-3300, CVE-2026-37460, CVE-2026-42504, CVE-2026-42507, CVE-2026-43958, CVE-2026-50219, CVE-2026-5419, CVE-2026-7774, CVE-2026-8643, CVE-2026-8829

Indicators of Compromise

IP Addresses: 202.56.2.126, 209.146.60.26

Read the full brief