BleepingComputer reports that malicious actors could exploit a critical vulnerability within the Jupiter Theme and JupiterX Core plugins for WordPress to facilitate privilege escalation.

Threatpost reports that most advanced persistent threat groups have been exploiting already known security flaws, in cyberattacks.

MITRE and the Cybersecurity Manufacturing Innovation Institute are co-chairing a new special interest group aimed at strengthening industrial control system and operational technology cybersecurity, reports SecurityWeek.

The Hacker News reports that the UpdateAgent macOS malware has been updated with new functionalities since evolving as a malware dropper.

Threat actors have been launching millions of attacks exploiting a remote code execution flaw in the Tatsu Builder plugin for WordPress, with up to half of the nearly 100,000 websites leveraging the plugin still at risk of attacks, according to BleepingComputer.

Costa Rican President Rodrigo Chaves has claimed that the Conti ransomware gang has been working with collaborators across Costa Rica in a recent ransomware attack against its government agencies, reports CyberScoop.

Tens of security flaws in different Apple OS versions, including two exploited vulnerabilities in macOS Big Sur and Catalina, have been addressed by Apple in security patches released on Monday, according to SecurityWeek.