Agency / Actor
NIST
Every ZeroDayFeed story on NIST — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
5articles
2026-10-20latest coverage
Patches & Advisoriesmost-covered category
CISAmost appears with
-
Breaches
Rank Math PRO Update Channel Served Malware to WordPress Sites for 11 Hours
For about 11 hours on Oct 15–16, Rank Math's paid PRO plugin shipped as malware. Any WordPress site that activated v3.0.123 in that window should be treated as compromised, even after updating to 3.0.124. The bug is tracked as CVE-2026-111862 (CVSS 9.8).