Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE

The Hacker News - Oct 12, 2026

A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP code on vulnerable WordPress websites, resulting in remote code execution (RCE). The

Read full article
More News
How a loophole in Canada's species-at-risk law can leave wildlife in limbo

How a loophole in Canada's species-at-risk law can leave wildlife in limbo

A new study finds a legal gap in Canada's Species at Risk Act can leave species waiting years for protection, with 153 of 288 cases overdue and still unresolved as of January 2025.

Read more
AI is less regulated than milk, says Microsoft president

AI is less regulated than milk, says Microsoft president

Brad Smith calls for global rules on AI, and says the UK is in the "best position" to lead the charge.

Read more
Full fleet, full speed, full connection: American Airlines will bring Starlink to every mainline jet

Full fleet, full speed, full connection: American Airlines will bring Starlink to every mainline jet

American will expand its sweeping modernization of the inflight customer experience by bringing Starlink to all mainline aircraft, including Airbus narrowbodies and Boeing narrowbodies and widebodies. Installations will begin in early 2027. With plans to equip more than 1,000 mainline aircraft, American aims to operate one of the world’s largest Starlink-connected fleets equipped with Starlink’s Performance Aero Terminal, which can deliver speeds of up to 1 Gbps per terminal.

Read more
The first-date diet: Nutritionist reveals garlic could boost your sex appeal while fizzy drinks and sweeteners may ruin your chances

The first-date diet: Nutritionist reveals garlic could boost your sex appeal while fizzy drinks and sweeteners may ruin your chances

The days of worrying about what to wear on a first date may be over - as what you've eaten beforehand could be just as important, according to a nutritionist.

Read more
Merchants must look beyond fraud in the use of AI to unlock a data goldmine

Merchants must look beyond fraud in the use of AI to unlock a data goldmine

Inclusive global payments platform, Ecommpay, has published a new white paper - Earning insight from every transaction: optimising enterprise-wide performance through AI and payments data - that challenges the current narrow use of AI in e-commerce. While the application of AI is well-proven for fraud prevention, the payments innovator believes e-commerce merchants are missing the opportunity to use AI to interrogate the immense volume of transaction data for enterprise-wide benefits. It believes PSPs have a critical role to play in shifting the use of AI.

Read more
EventsAir research finds 72% of event professionals value AI, yet one in four still aren’t using it

EventsAir research finds 72% of event professionals value AI, yet one in four still aren’t using it

New research from EventsAir, a leading event management software provider, reveals a significant gap between enthusiasm for artificial intelligence and its practical adoption across the events industry. While 72 per cent of event professionals consider AI valuable or essential for improving event outcomes, 26 per cent are still not using it all. Among those using AI, event marketing is currently the leading application, cited by 62.4 per cent of respondents, well ahead of data analysis and reporting (37.8 per cent). 15 per cent apply it to logistics and operations, 14.5 per cent to maximizing attendee engagement and 13.2 per cent attendee personalization.

Read more
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI orchestration layer powered by Anthropic's Claude Code, has been attributed

Read more
Step inside Britain's strangest property: Abandoned RAF 'spin machine' used to test the limits of the human body goes on sale for £750,000

Step inside Britain's strangest property: Abandoned RAF 'spin machine' used to test the limits of the human body goes on sale for £750,000

If you've got a spare £750,000 burning a hole in your pocket, you could become the proud owner of Britain's strangest property.

Read more
DeepSeek’s cost-saving AI may lead to inaccuracy in model performance: research

DeepSeek’s cost-saving AI may lead to inaccuracy in model performance: research

New research has exposed a potential flaw in the memory-saving technology underpinning DeepSeek’s models, marking a rare challenge to a breakthrough that has helped the Chinese artificial intelligence lab close the gap with US rivals OpenAI and Anthropic with its low-cost approach. The findings were published late last month in a paper led by researchers from ByteDance and co-authors affiliated with Princeton University, Stanford University and the University of California, Berkeley. The study,...

Read more
'Prepare for the unthinkable' warning over autumn flooding

'Prepare for the unthinkable' warning over autumn flooding

Those living in flood-hit areas say they are worried, and have started preparing.

Read more
Japan data leak concerns grow as 1.67 million JR East email addresses may be exposed

Japan data leak concerns grow as 1.67 million JR East email addresses may be exposed

Japan has urged banks to adopt chip-enabled passports and MyNumber cards for customer verification after a wave of cyberattacks raise concerns about millions of personal records.

Read more
Starlink vs Jio: Can Elon Musk make satellite internet affordable in India’s cheap data market?

Starlink vs Jio: Can Elon Musk make satellite internet affordable in India’s cheap data market?

Elon Musk says he will bring affordable Starlink satellite internet in India, challenging Reliance Jio’s dominance in the country’s low-cost data market ahead of its proposed IPO. 

Read more

About Us

Delivering news from all over the globe, StarJournal keeps you abreast with the greatest minds in science, be it researchers, theorists or even popularizers.