WordPress Has a Critical Hole — And CISA Left Its Own Keys in Public View
A critical WordPress flaw lets strangers run code on any site with no login needed. Plus: CISA's own AWS keys sat exposed on GitHub for six months, and a new botnet is hoarding cloud credentials from exposed AI tools.