Two popular WordPress plugins need security updates. Also: a BGP hijack pushed a malicious Virtualizor update, Dropbox accounts were breached through Lenovo ID, Google gives sites an AI Search opt-out, and Florida and Texas push back on Flock cameras.
Aurora ransomware operators used Cursor inside real victim networks. Today’s brief also covers a critical Avada update, an 8.7-million-person airport breach, Anthropic’s Pentagon court win, and Google’s EEA search-policy change.
An unpatched Calix router flaw can expose home-network devices, miniOrange SSO bugs are being probed in WordPress attacks, the FCC is reconsidering E-Rate, and Alabama subpoenaed OpenAI.
Elementor Pro has a critical file-upload flaw worth patching now, Microsoft disclosed a severity-10 Entra ID bug it already fixed, and TikTok agreed to a $400 million children’s privacy settlement. Updated August 23 after Microsoft corrected the Entra flaw’s exploitation status.