Displaying items by tag: DigitalRisk

Imagine installing a plugin to protect your website—only to discover it’s the very reason your data has been compromised. That’s the disturbing reality facing more than 1,100 WordPress websites, all of which fell victim to a fake security plugin that promised protection while quietly enabling a full-scale breach.

Cybersecurity is a battle that never stops, and as new threats emerge, so must our defenses. Today, two critical vulnerabilities—CVE-2025-1976 (Broadcom Brocade) and CVE-2025-3928 (Commvault)—are actively exploited in the wild. These flaws, added recently to the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) Known Exploited Vulnerabilities (KEV) catalog, put countless organizations at immediate risk. In this post, we break down these vulnerabilities, the potential risks they pose, and what you must do to stay protected.