Phishing

Security Insights

Click2Shell: The Public WordPress PoC That Turns One Admin Click Into Server Root
Bymenzi September 22, 2026

The flaw A pre-authenticated remote code execution chain in WordPress Core now has full technical details and a working proof-of-concept in public. It goes by “Click2Shell,” and BleepingComputer wrote it up on September 21. The good news is that it’s already fixed, in version 7.1.1. The bad news is that most of the internet’s WordPress…

Read More Click2Shell: The Public WordPress PoC That Turns One Admin Click Into Server Root
Security Insights

Hotel Wi-Fi Gateways Being Hijacked to Steal M365 Credentials — African Enterprises Need Full-Tunnel VPN
Bymenzi August 1, 2026

Hotel Wi-Fi gateways are being hijacked to steal M365 credentials. Here’s how it works. Since June, attackers have been compromising captive portal gateways at hotels and conference centres to hijack Microsoft 365 accounts. ReliaQuest’s threat research team documented the campaign, and the mechanics matter because the usual security advice doesn’t cover this. The attacker doesn’t…

Read More Hotel Wi-Fi Gateways Being Hijacked to Steal M365 Credentials — African Enterprises Need Full-Tunnel VPN