Cope retweeted
Easy Digital Downloads now lets you manage subscription data through AI assistants.
You can investigate customer charges, identify failed renewals, analyze cancellations, and forecast recurring revenue using natural-language prompts instead of manually digging through reports.
AI handles the analysis. Refunds and cancellations stay under your control.
The subscriptions you sell with Easy Digital Downloads now work with AI. Ask your assistant why a customer was charged, which renewals are failing, or where subscribers drop off. Cancellations and refunds stay in your admin.
easydigitaldownloads.com/blo…
Cope retweeted
Google DeepMind unveils Genie 4, its most realistic and interactive world model yet.
It lets users steer dynamic worlds in real time, change actions and camera angles, and interact with characters that can speak, while simulating realistic physics and generating matching audio.
Cope retweeted
Black Friday discounts can drive sales while quietly eating into your margins.
WPBeginner makes a good point here: keep discounts modest on bestsellers, clear old stock with deeper cuts, and use bundles to add value without sacrificing as much profit.
More sales mean little if you’re losing money on every order.
A bigger Black Friday discount can wipe out your profit.
Sell a $50 product, keep $20 after costs. Take 40% off and that $20 is gone.
Try 20-30% off best sellers, deep cuts on old stock, or a bundle instead.
Black Friday Prep, Part 1. Follow @WPBeginner for Part 2 👇
Cope retweeted
WordPress 7.2 Beta 2 is ready for testing, with refinements to the Abilities API, DataViews, DataForm, and the admin experience.
WordPress 7.2 Beta 2 is ready for testing. It includes refinements to the Abilities API, DataViews, DataForm, and the admin experience. Test it on a local site or in a test environment, not on a production site. wp.me/pZhYe-5H4
Cope retweeted
Mozilla has released Firefox 159, addressing numerous security vulnerabilities rated high impact.
The fixes include:
• CVE-2026-117861: Sandbox escape
• CVE-2026-117860: Same-origin policy bypass
• Privilege escalation flaws
• Numerous memory-safety bugs
These affect critical browser security boundaries.
Review the advisory:
mozilla.org/en-US/security/a…
Cope retweeted
Apple has patched CVE-2026-86950, a CoreGraphics flaw that could allow arbitrary code execution when processing a maliciously crafted file.
Apple says it may have been exploited in targeted attacks against specific individuals.
iOS 18.7.11 and iPadOS 18.7.11 bring the fix to older devices.
🚨 Apple patches a possibly exploited CoreGraphics flaw on older iPhones and iPads.
CVE-2026-86950 could allow arbitrary code execution. Apple says it may have been used in targeted attacks against specific individuals.
The fix is now available in iOS 18.7.11 and iPadOS 18.7.11.
Details → thehackernews.com/2026/10/ap…
Cope retweeted
Keystone is destroying 18,835 hardware wallets after hackers stole the key used to verify device authenticity.
The breach also exposed 25,964 buyer records.
Private keys and recovery phrases weren't compromised, but counterfeit devices could pass the authenticity check.
A trusted verification process is only as strong as the secrets behind it.
Cope retweeted
North Korea-linked Lazarus hackers are abusing South Korean banking security software to deploy malware.
Operation FlashHole uses DLL sideloading, GitHub-hosted payloads, and memory-based execution to evade detection.
The malware also uses ML-KEM-1024 for post-quantum encrypted communications.
⚠️ Lazarus hackers are exploiting South Korean banking security software to deploy malware in a new espionage campaign.
The attacks use GitHub-hosted payloads, new backdoors, and malware communications protected by post-quantum encryption.
Read: thehackernews.com/2026/10/la…
Cope retweeted
🚨 Palo Alto Networks confirms a critical Brotli vulnerability affecting some PAN-OS firewall deployments.
CVE-2026-111497 carries a CVSS score of 9.2.
A crafted compressed stream could trigger memory corruption, expose sensitive data, crash services, or potentially execute code.
No active exploitation reported.
Official advisory: security.paloaltonetworks.co…
Cope retweeted
180,000 infected computers. One disrupted command-and-control operation.
Australia cut off a cybercriminal's access to Amadey-infected machines, but the malware wasn't removed.
Disrupting the attacker is only half the job. Infected systems still need remediation, and stolen credentials may remain exposed.
🛑 Australia says it gained access to an Amadey malware operation's backend and cut off a cybercriminal's control over 180,000 infected computers worldwide.
The malware wasn't removed, but the operator lost access.
Here's what happened: thehackernews.com/2026/10/au…
Cope retweeted
OpenAI patched a flaw that let researchers extract hidden AI reasoning through its compaction workflow.
The encryption wasn't broken. The workflow was abused.
A critical AI security lesson: protecting sensitive data means securing every process that handles it, not just encrypting it.
‼️ OpenAI encrypts its AI models' hidden reasoning to keep it unreadable. Researchers found a way to extract it as plaintext using OpenAI's own compaction feature.
The method bypassed earlier protections. OpenAI has now patched the flaw.
Here's how it worked ↓ thehackernews.com/2026/10/op…
Cope retweeted
Learn how to install and use it: wpforms.com/docs/how-to-inst…
Cope retweeted
A form submission tells you who contacted your business. WPForms User Journey helps you understand what they did before reaching out.
When someone submits a form, you can see the pages they visited, available referral information, time spent on each page, and URL parameters, all within the form entry details.
That means you can spot patterns, such as leads regularly visiting your pricing page before enquiring, or potential customers reading a specific service page before requesting a quote.
You can use those insights to improve landing pages, refine your content, and understand which parts of your website support conversions.
You can even include journey details in form notification emails using WPForms' Entry User Journey Smart Tag.
Instead of treating every submission as an isolated lead, you get more context to help you decide what to improve next.
Cope retweeted
Tailscale has confirmed serious privilege-escalation issues in Tailscale SSH.
The Tailworm research describes how a compromised device could potentially lead to root access on other servers, depending on permissions and configuration.
No CVE or patched release yet. Tailscale is targeting a fix within 24 hours.
Mitigate SSH forwarding now.
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.
Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet.
Mitigate now:
→ Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart
→ Tighten SSH access rules to the users/devices that need them
Read: thehackernews.com/2026/10/un…
Cope retweeted
A researcher who gained root access to a 2025 Samsung Smart TV claims to have uncovered extensive tracking capabilities, including automatic content recognition, screenshot handling, geolocation, network mapping, audio-event telemetry and AI-driven viewer profiling for targeted advertising.
The findings remain unverified on an unmodified TV.
‼️ Researcher Gains Root Access to Samsung Smart TV, Uncovers Extensive User Tracking
Details: cybersecuritynews.com/resear…
A cybersecurity researcher says he gained root access to a 2025 Samsung Smart TV and found software built to track far more than the picture on the screen. Known online as log4j, he started after the set kept showing ads that seemed oddly specific to his household.
He says the Tizen firmware was AES-encrypted, so keys were not available without opening the hardware. He used zero-day flaws to open a root shell and documented the tracking features with code screenshots. Samsung has not publicly answered.
The findings have not been reproduced on an unmodified television. In posts starting on October 21, 2026, log4j listed automatic content recognition, screenshot handling, geolocation, network mapping, a targeted advertising service, and user profile building.
#CybersecurityNews
Cope retweeted
Two critical Wasmtime sandbox escapes, both rated CVSS 9.9:
• CVE-2026-115889 affects all architectures.
• CVE-2026-115893 affects ARM64.
Both flaws are in Cranelift, Wasmtime’s default compiler. A malicious WebAssembly module could escape its sandbox.
If your application embeds Wasmtime, update the dependency. Updating the CLI alone is not enough.
Cope retweeted
953 online stores compromised, mostly running Magento.
The campaign exploited PolyShell (CVE-2026-48356) and SessionReaper (CVE-2025-54236) to gain access, then injected JavaScript loaders designed to evade security scanners.
One case involved a rogue admin account despite patched Magento core.
Patching matters. So does auditing admin access and unexpected CMS blocks.
Cope retweeted
PHP2Shell is now a confirmed exploitation issue, not just a theoretical risk.
CVE-2026-109618 and CVE-2026-109619 enable unauthenticated RCE on affected PHP deployments.
If you run PHP in production, verify your version and patch now.
🚨 CISA adds two PHP2Shell bugs to its KEV catalog after confirming active exploitation.
CVE-2026-109618 and CVE-2026-109619 enable unauthenticated remote code execution on affected PHP deployments.
Read ↓ thehackernews.com/2026/10/ci…
Cope retweeted
When your primary mailer fails, WordPress emails can stop getting through. WP Mail SMTP Pro’s Backup Connection automatically reroutes emails through a backup mailer when the primary connection fails. Set up a fallback before you need it.
Cope retweeted
PHP has issued updated Windows builds to fix CVE-2026-111497, a critical Brotli decompression vulnerability.
Fixed packages:
• PHP 8.5.12-1
• PHP 8.4.27-1
• PHP 8.3.36-1
• PHP 8.2.35-1
The -1 suffix signals a dependency rebuild, not a new PHP runtime version.
Windows users should update. Linux deployments need to assess their own Brotli packages.
Official notice: php.net/archive/2026.php#202…
