We are a collective of digital rights advocates, security experts, and educators committed to empowering individuals and communities with the knowledge and tools to protect their digital freedoms.
How we work to protect digital rights and empower communities
Raising awareness about digital rights, privacy threats, and security best practices.
Advocating for policies and regulations that protect digital rights and freedoms.
Providing training and resources on digital security for vulnerable groups.
Offering direct assistance to individuals and organizations facing digital threats.
Creating networks of digital rights defenders to share knowledge and resources.
Working with partners globally to develop solutions to digital security challenges.
Latest WordPress security vulnerabilities affecting plugins, themes, and core.
Published Date: Apr 10, 2026
The Aruba HiSpeed Cache plugin for WordPress up to version 3.0.4 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to reset plugin settings via a forged request if they deceive a site administrator into initiating an unintended action.
Published Date: Apr 10, 2026
The Webling plugin for WordPress is affected by a stored cross-site scripting (XSS) vulnerability in versions up to 3.9.0. This flaw allows authenticated users with a Subscriber role or higher to inject malicious scripts into Webling forms and member lists, which can be executed when an administrator views these sections.
Published Date: Apr 9, 2026
The Quick Playground plugin for WordPress is vulnerable to remote code execution in versions up to 1.3.1 due to insufficient authorization checks on its REST API endpoints. This allows attackers to execute arbitrary code on the server by retrieving a sensitive sync code and uploading malicious PHP files.
Stay informed about the latest digital rights issues, threats, and community resources

In today's fast-evolving digital environment, the increasing reliance on Artificial Intelligence (AI) for both defenses and attacks introduces a new paradigm in cybersecurity. As AI capabilities grow, so does the risk for profound security breaches, as attackers leverage sophisticated algorithms to uncover vulnerabilities at an unprecedented speed and scale. This has provided cyber adversaries with advanced tools to exploit even the most fortified systems, posing a new wave of challenges for cybersecurity professionals and particularly affecting software applications like WordPress that rely heavily on robust security protocols. Virtual patching emerges as a critical defense strategy in this landscape. Solutions like vDefend and Avi offer robust platforms for implementing virtual patches, acting as immediate shields against newly discovered vulnerabilities without altering the source code of an application. This approach is particularly significant as it provides a temporary yet effective means to protect systems while more comprehensive patches are being developed and tested. The ability of virtual patching solutions to quickly respond to AI-discovered vulnerabilities is not only innovative but crucial. For WordPress website owners, integrating such solutions can prevent potential security incidents that might lead to data breaches, resource hijacking, or worse, complete system take-overs. With this added layer of defense, staying ahead of AI-driven exploit discovery can mean the difference between a secure digital presence and falling victim to cybercrime. As we navigate this AI-driven era, it's clear that virtual patching will serve as a cornerstone in maintaining digital safety.

The popularity of 'jailbroken' Amazon Fire TV Sticks, devices that are modified to access unauthorized streaming content, is growing. However, these modded devices pose significant cybersecurity risks, not only to the individual devices but to entire home networks. By sidestepping the security measures integrated into the original software, these jailbroken devices open the door to malware, ransomware, and other cyber threats. The unauthorized software that enables access to pirated content often includes backdoor access points for hackers who exploit them to infiltrate the devices connected to the network. This can lead to serious data breaches, where sensitive personal information, including banking details, could be compromised. Moreover, the lack of official updates for modded devices leaves security vulnerabilities unpatched, increasing their susceptibility to being hijacked by cybercriminals. For WordPress site owners, the risks extend beyond personal security into their professional domains, potentially leading to unauthorized access to websites, which can result in service disruptions or the defacement of web pages. To safeguard their networks, users should stick to official, compliant devices and ensure all devices on their home network are secured with strong passwords and firewalls. Regularly updating all software and firmware, avoiding third-party software, and employing network monitoring solutions are additional steps to enhance security.
The financial sector's fast-paced environment constantly requires innovative security solutions to combat ever-evolving cyber threats. The introduction of Anthropic Mythos AI marks a significant step forward in the realm of financial cybersecurity. This cutting-edge artificial intelligence is deployed in Wall Street banks to preemptively identify and neutralize hidden financial cyber threats. With AI's ability to process massive datasets and detect anomalous patterns, banks can spot zero-day vulnerabilities that may otherwise remain unnoticed until exploited. Recent deployments have uncovered thousands of these vulnerabilities across major financial systems, emphasizing the need for proactive measures in cybersecurity. As part of comprehensive security protocols, these financial institutions are integrating Mythos AI with their existing infrastructures to fortify defenses against potential attacks, demonstrating a paradigm shift from reactive to preventive security measures. The broader implications touch upon enhancing data integrity, reducing the risk of financial fraud, and ensuring compliance with cybersecurity regulations. This movement towards AI-focused defense strategies not only safeguards assets but also instills greater confidence among stakeholders, reflecting the new direction financial institutions are steering towards for cyber resilience.
Join us in defending digital rights and protecting vulnerable communities.
Get in touch to discuss your needs or how you can support our mission
We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies.