Weekly Cyber Security News 15/01/2021

A selection of this week’s more interesting vulnerability disclosures and cyber security news. For a daily selection see our twitter feed at #ionCube24. A heavy heap of horror for some WordPress users surfaced. Do check them out pronto:

• Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover – Two security vulnerabilities — one a privilege-escalation problem and the other a stored XSS bug — afflict a WordPress plugin with 40,000 installs.

Yet another development on the SolarWinds hack:

• New Sunspot malware found while investigating SolarWinds hack

And for a change, I’m not going to moan about Ring as there’s some good news – for now:

• Ring Rolls-Out End-to-End Encryption to Bolster Privacy