WordPress issued its second core patch in a week, with CVE-2026-93485 and CVE-2026-87902 exposing different weaknesses in how requests move between rendering and file-resolution stages. Attackers began probing the second flaw within hours of disclosure. For a platform used across a large share of the web, that leaves little time between a fix becoming public and vulnerable sites being tested, particularly when the affected code is widely reused.

CLOSEDQUORUM uses four LLM providers as a voting panel for its operations, with the models queried independently by the malware rather than directed interactively by an operator. The design effectively turns commercial AI APIs into part of the command infrastructure. Talos has not observed the malware operating with live credentials, so its capabilities remain largely demonstrated rather than confirmed in the wild, but the approach provides another way to distribute operational decisions across external services.

ShinyHunters' claimed FBI breach and Microsoft's EvilTokens takedown also illustrate the different levels of certainty surrounding major cyber incidents. ShinyHunters' claim of compromising a law-enforcement agency through an Oracle zero-day remains unverified, while Microsoft and law enforcement have confirmed arrests and infrastructure seizures against EvilTokens after the service had compromised 12,000 inboxes.

Researchers disclosed CVE-2026-93485, an unauthenticated stored cross-site scripting flaw in WordPress core comment handling. A mismatch between comment sanitisation and later HTML formatting filters allowed attackers to inject a working JavaScript event handler without needing an approved comment or any user interaction. If triggered in an administrator's session, the flaw could be chained to remote code execution via the plugin upload feature. WordPress 7.1.1 fixes the issue with a corrected regular expression, backported to all supported branches down to 4.7.36.

Cisco Talos disclosed CLOSEDQUORUM, a Windows implant that delegates attack decisions to a panel of commercial large language models instead of a traditional command-and-control server. Four providers vote on actions such as credential theft, process injection, or persistence, with the majority choice executed automatically. The malware targets browser passwords, LSASS memory, and cryptocurrency wallets, exfiltrating stolen data through an encrypted Discord webhook.

The ShinyHunters extortion group claims it breached FBI systems using an unpatched zero-day vulnerability in Oracle PeopleSoft, stealing 2–3TB of employee and applicant data. The group defaced the FBI Jobs website and says it is now exploiting the same flaw against other organisations, including Fortune 500 companies. The FBI confirmed it is investigating unauthorised activity affecting FBIjobs.gov but has not confirmed a breach or data theft.

Microsoft detailed EvilTokens, a phishing-as-a-service platform that abused OAuth device code authentication to steal tokens from over 12,000 inboxes across 10,000 organisations. The AI-assisted kit, sold by threat actor Storm-2992, automated lure creation, target identification, and post-compromise reconnaissance via Microsoft Graph. Microsoft's Digital Crimes Unit worked with partners to disrupt the infrastructure supporting the service.

A researcher published BigDiskBuster, an unpatched proof-of-concept tool that fills available disk space to prevent Microsoft Defender from installing signature and platform updates. The tool, released by former Microsoft researcher Abdelhamid Naceri, also blocks Windows Update from replacing the Malicious Software Removal Tool. No CVE or vendor advisory exists, and Naceri's three prior Defender exploits were each exploited in live attacks before being patched.

Attackers compromised a maintainer account for the npm package @dforge-core/dforge-mcp, using GitHub Actions trusted publishing to ship a malicious version 0.2.21 with valid provenance signatures. The four-stage payload activated only when the MCP server launched, installing a remote shell that deleted itself from disk afterwards. Researchers linked the loader to 65 repositories and found a related payload using Ethereum transactions for command-and-control communication.