Critical flaws in CleanTalk’s WordPress plugin allow remote code execution; update to secure your site.

Hackers are actively exploiting a recently fixed vulnerability in the WordPress Advanced Custom Fields plugin

The loader, which was documented by Morphisec last month, is designed to check the system's graphic card to determine if it's running on a virtual machine or in a sandbox environment, and ultimately launch the Aurora information stealer malware.

The campaign, per Malwarebytes, has claimed 585 victims over the past two months, with the threat