WordPress

The article discusses the paradigm shift in cybersecurity caused by the arrival of highly autonomous frontier AI models capable of complex exploit discovery. It highlights how tools like GPT 5.6 Sol are enabling researchers to find critical vulnerabilities in widespread software like WordPress with unprecedented speed.

A sophisticated ClickFix campaign is leveraging the Polygon blockchain to implement 'EtherHiding,' allowing attackers to rotate C2 servers via smart contracts. This technique makes traditional IP and domain blocking ineffective by using a distributed ledger as an attacker-controlled command center.

Using an advanced multi-agent LLM approach, a researcher discovered a critical zero-day vulnerability in WordPress that allows for pre-authentication RCE. The exploit chain leverages the WordPress batch API to trigger an SQL injection, which is then escalated to full system control.