We are a collective of digital rights advocates, security experts, and educators committed to empowering individuals and communities with the knowledge and tools to protect their digital freedoms.
How we work to protect digital rights and empower communities
Raising awareness about digital rights, privacy threats, and security best practices.
Advocating for policies and regulations that protect digital rights and freedoms.
Providing training and resources on digital security for vulnerable groups.
Offering direct assistance to individuals and organizations facing digital threats.
Creating networks of digital rights defenders to share knowledge and resources.
Working with partners globally to develop solutions to digital security challenges.
Latest WordPress security vulnerabilities affecting plugins, themes, and core.
Published Date: May 6, 2026
The Gravity Bookings Premium plugin for WordPress contains an SQL Injection vulnerability affecting versions up to 2.5.9. This flaw allows attackers to inject malicious SQL queries, potentially leading to unauthorized access to sensitive database information.
Published Date: May 5, 2026
The Loco Translate plugin for WordPress is susceptible to a path traversal vulnerability via the `fsReference` AJAX route, allowing unauthorized file access. By exploiting this flaw, authenticated users with Translator-level access or above can traverse directories and read sensitive files on the server.
Published Date: May 4, 2026
The Conditional Fields for Contact Form 7 plugin up to version 2.6.7 is vulnerable to uncontrolled resource consumption. This issue allows unauthenticated attackers to leverage the REST API endpoint to cause resource exhaustion on the server, potentially crashing the PHP process.
Stay informed about the latest digital rights issues, threats, and community resources
Punjab National Bank (PNB), one of India's largest financial institutions, has made a strategic decision to increase its cybersecurity budget by over 50% in the current financial year. The significant boost in funding is a proactive measure to combat the ever-evolving landscape of digital threats, particularly those emanating from advanced artificial intelligence models such as Anthropic's Mythos. As technology evolves, so do the methods and sophistication of cyberattacks, prompting financial entities like PNB to fortify their defense systems. The bank's focus is not just on immediate threats but also on the potential vulnerabilities that may arise as AI technology continues to integrate deeper into various sectors, including finance. AI models capable of processing vast amounts of data are reshaping how cyber risks are perceived and managed. By investing heavily in robust cybersecurity measures, PNB aims to safeguard its infrastructure against potential intrusions that could compromise sensitive financial information and customer data. This decision underscores a broader trend where financial institutions respond to regulatory pressures and evolving attack vectors by upgrading their cybersecurity frameworks. Investing in cyber defenses is not merely about compliance but also about ensuring business continuity and maintaining customer trust. As AI continues to develop at a breakneck pace, robust cybersecurity will be vital in mitigating associated risks and ensuring the secure operation of financial services. PNB's move highlights the importance placed on staying ahead of cybercriminal activities that could exploit AI advancements for malicious purposes.

In a significant move to safeguard digital infrastructure, India has issued an infosec red alert, highlighting the looming threat posed by advanced AI models like Mythos. The country's securities regulator, SEBI (Securities and Exchange Board of India), has urged all market players to revisit and strengthen their cybersecurity strategies. Given the increasing sophistication of AI-driven cyberattacks, the regulator emphasized the urgency of mastering cyber-basics and developing adaptive defenses. As AI technologies like Mythos become more prevalent, they could potentially be leveraged to instigate mass-scale cyberattacks, posing severe risks to financial markets and businesses globally. This mandate aims to prepare the industry with robust cybersecurity measures and prevent any potential exploitation that could lead to widespread financial and reputational damage. SEBI's call to action includes investing in advanced threat detection systems, conducting regular security audits, and enhancing the cybersecurity literacy of personnel at all levels. The initiative underscores the importance of proactive defense mechanisms and continuous adaptation to stay ahead of evolving cyber threats. As cybercriminals become more adept at using AI for nefarious purposes, businesses must fortify their infrastructure to mitigate risks and ensure the safety of digital transactions, safeguarding both business continuity and consumer trust.
In a move to stay ahead in the rapid-paced world of cybersecurity, Indian firms are increasingly turning to artificial intelligence to shield against digital threats. These companies are utilizing their own AI agents powered by sophisticated Large Language Models (LLMs) to identify and mitigate software vulnerabilities more efficiently. Traditionally, the detection and remediation of such vulnerabilities could take several days, leaving systems exposed to potential attacks. However, with the help of AI, these tasks can now be completed in mere hours. This advancement is pivotal as cybercriminals continue to refine their tactics and operate with the speed and efficiency of machines. AI's capability to process vast amounts of data at incredible speeds offers a formidable defense against these evolving threats. These AI agents use machine learning techniques to not only recognize existing vulnerabilities but also predict and prevent future attacks. They continually learn and adapt to new security challenges, improving their effectiveness over time. For WordPress site owners, this technology could translate into more secure plugins and themes, quicker updates to patch vulnerabilities, and a reduced risk of exploitation by hackers. As Indian cyber firms pave the way with these AI advancements, they are setting a precedent for a more proactive, rather than reactive, approach to cybersecurity. This shift not only enhances the security landscape but also empowers website owners, system administrators, and the broader tech community to fortify their digital environments against increasingly sophisticated cyber threats.
Join us in defending digital rights and protecting vulnerable communities.
Get in touch to discuss your needs or how you can support our mission
We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies.