Skip to content
Botnet Alert
Tech and security news that matters
Get Alerts

Botnet Alert

Vulnerabilities

AutomatorWP Pro Webhook Plugin Authorization Bypass Enables Account Takeover

Unauthenticated attackers can reset WordPress administrator passwords via misconfigured webhook automations in the AutomatorWP Pro plugin, a critical flaw rated 9.8.

Vulnerabilities

Control Web Panel authorization bypass exposes remote API access

Vulnerabilities

VITEC EZ TV Platform Server Has Critical Unrestricted File Upload Flaw

Vulnerabilities

OpsTree BuildPiper OTP Brute-Force Flaw Allows Account Takeover

Vulnerabilities

Server-Side Request Forgery in AWS mcp-gateway-registry Exposes Internal Networks

Cyber Attacks

wfx-loot Campaign Steals GitHub Secrets via CI Workflows and Compromised Tokens

Malware & Ransomware

View all

Cyber Attacks

View all
Cyber Attacks

ClickFix Campaigns Hide Executables in PNG Images to Compromise Windows Domain Controllers

Attackers use fake verification prompts to trick users into running commands that extract malware from images and seize control of domain controllers.

Cyber Attacks

Fake Advent Calendar Stores Use Shopify and AI Images to Deceive Shoppers

Malwarebytes Labs found cloned storefronts with fake reviews and contradictory product claims selling unlicensed holiday merchandise.

Cyber Attacks

Refrigeration Controllers Targeted in Iran-Linked Sabotage Campaign

French authorities attribute the October attack on retail cooling systems to an Iranian cyber unit, citing altered defrost settings that caused fires.

Cyber Attacks

ArmorSteal Malware Uses Fake Software Downloads to Steal Data and Mine Crypto

Attackers distribute the Python-based ArmorSteal kit via lookalike sites, using PowerShell to install credential stealers and Monero miners on Windows systems.

Model Supply Chain

View all

Vulnerabilities

View all

Latest news

At Botnet Alert you will find daily coverage of malware and ransomware, cyber attacks and model supply chain and step-by-step guides written for CISOs and IT managers. Tech and security news that matters. Last updated November 14, 2026.

About Botnet Alert

What does Botnet Alert cover?

Botnet Alert covers malware and ransomware, cyber attacks, model supply chain, vulnerabilities, data breaches, threat intelligence, cloud security. You get the news first, then 143 guides that show how the attacks and the fixes work.

Where does Botnet Alert get its information?

Botnet Alert gets its information from more than 150 primary sources: official advisories, vendor notices, first-hand research, the National Vulnerability Database and the CISA Known Exploited Vulnerabilities catalog. Each article lists its sources. Other outlets are named when we use their work.

How often is Botnet Alert updated?

Botnet Alert is updated as soon as a primary source confirms a story, at any hour. The fastest sources are checked every 45 seconds. Short first reports are extended later, and guides are revised when they go out of date.

Is AI used to write Botnet Alert articles?

Yes. AI has been used to draft Botnet Alert articles since the site launched in 2026. Each draft is checked by software against its sources, and figures, quotes or claims the sources do not support are blocked. The editorial policy explains how.

⌂