New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

The Hacker News - Sep 18, 2026

WordPress today released patches to fix a new set of vulnerabilities in its core software, one of which could allow a crafted web link, opened by a logged-in administrator, to install a theme from the official WordPress.org directory without anyone clicking Install. The security firm pwn.ai, whose researchers reported the flaw, calls the attack chain Click2Shell. On its own the flaw only

Read full article

More News

SpaceX secures three new NASA crew flights: What to know

Sep 18, 2026

SpaceX secures three new NASA crew flights: What to know

NASA has awarded SpaceX a contract modification for three additional missions to continue regular crew transportation to the International Space Station.Under the agency’s Commercial Crew Transportation Capability contract, this significant change brings the total awarded missions for SpaceX...

California Governor Gavin Newsom Issues A.I. Safety Executive Order

Sep 18, 2026

California Governor Gavin Newsom Issues A.I. Safety Executive Order

Gov. Gavin Newsom ordered the state to develop recommendations on safety measures, including requiring companies to build a “kill switch,” amid mounting concerns.

Now that's what you call mind-blowing! The human brain is TWO separate organs, scientists reveal

Sep 18, 2026

Now that's what you call mind-blowing! The human brain is TWO separate organs, scientists reveal

Rather than being a single, unified organ, scientists from Stanford Medicine now say the human brain consists of two ancient nervous systems, cleverly packaged together.

As Big Tech Takes Over Hollywood, the Picture Onscreen Gets Darker

Sep 18, 2026

As Big Tech Takes Over Hollywood, the Picture Onscreen Gets Darker

“The Social Reckoning” and other movies reflect growing discontent with Silicon Valley founders. But such films may be at the mercy of the companies themselves.

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

Sep 18, 2026

Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2

The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation

Has Queen Nefertiti finally been found? New scans provide fresh evidence for a hidden chamber beyond Tutankhamun's tomb that could hold the remains of his long-lost stepmother

Sep 18, 2026

Has Queen Nefertiti finally been found? New scans provide fresh evidence for a hidden chamber beyond Tutankhamun's tomb that could hold the remains of his long-lost stepmother

Archaeologists believe they may have uncovered a secret hiding behind the walls of Tutankhamun's tomb.

Iran and China Create First-of-Their-Kind Autonomous A.I. Influence Campaigns

Sep 18, 2026

Iran and China Create First-of-Their-Kind Autonomous A.I. Influence Campaigns

The countries, along with Israeli firms, combined Chinese open-source A.I. models and A.I. agents for the campaigns, foreshadowing future online manipulation.

Sovereign AI fund in talks to back Political Sciences: What to know

Sep 18, 2026

Sovereign AI fund in talks to back Political Sciences: What to know

A sovereign AI fund is reportedly in discussions to invest in drug discovery startup Political Sciences-a move aimed at using artificial intelligence to accelerate drug discovery. The government's £ 500m fund to support a wave of promising AI companies is close to taking a share in Potential...

Step Inside ATM 2026: Take a Virtual Tour of the Show’s Standout Stands

Sep 18, 2026

Step Inside ATM 2026: Take a Virtual Tour of the Show’s Standout Stands

Arabian Travel Market (ATM) 2026 recognised six exhibitors for outstanding stand design, creativity, technology and visitor experience at the Arabian Travel Market (ATM) 2026 Best Stand Awards, taking place this week at Dubai World Trade Centre (DWTC). An independent panel of industry experts judged the Awards, recognising exhibitors that went beyond visual impact to create engaging, functional spaces that support business conversations and bring their brands and destinations to life.

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Sep 18, 2026

Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation

Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889, carries a CVSS score of 10.0. "Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network,"

Marineland beluga from Niagara Falls, Ont., dies at Spain aquarium, 3rd death after rescue transfer

Sep 18, 2026

Marineland beluga from Niagara Falls, Ont., dies at Spain aquarium, 3rd death after rescue transfer

A beluga in Spain that was part of the massive relocation of animals from the shuttered Marineland park in Niagara Falls, Ont., has died. Two other belugas died within weeks of being moved to the U.S.

Recommended

Indian-origin researchers used Claude AI to hack OpenAI’s systems—got ₹6.27 lakh bounty

Sep 18, 2026

Indian-origin researchers used Claude AI to hack OpenAI’s systems—got ₹6.27 lakh bounty

The three-member team from cybersecurity firm Hacktron AI included chief technology officer Mohan Pedhapati, along with researchers Harsh Jaiswal and Rahul Maini.

The Next Discovery

The Next Discovery is equipped with recent Science & Tech news to impart knowledge to individuals awaiting the future.

ABOUT US
NEWSLETTER

Copyright © 2015 - 2026 The Next Discovery. All Rights Reserved.