Weekly Cyber Security News 09/04/2026

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

Thankfully this common WP Plugin is well patched by now, but of course there will always be some who don’t enable auto-updates…

• Hackers exploit critical flaw in Ninja Forms WordPress plugin

But its better late than never for this one:

• 13-year-old bug in ActiveMQ lets hackers remotely execute commands

Interesting, Rowhammer has migrated to the GPU:

• New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips