WordPress plugin with 5 million installs added backdoor giving developers remote access to any site

Background

Trump's Board of Peace released a 15-point plan last month for Gaza. It aimed for complete disarmament of Hamas and other armed groups there. Hamas said it would only give up heavy weapons if Israel stopped all attacks and left Gaza entirely.

What happened

Israeli Prime Minister Benjamin Netanyahu rejected the plan. He said Israeli forces will not leave Gaza until Hamas is genuinely disarmed. Hamas and Israel remain at odds over the terms, even after an initial ceasefire began in October.

Why it matters

This disagreement could block any lasting ceasefire or peace deal. What happens in Gaza affects millions of people living there. It also shapes how the US handles the Middle East.

Background

Typhoon Dolphin is a powerful tropical storm that made landfall in eastern China. The region includes major cities like Shanghai and Wenzhou in Zhejiang province. When typhoons hit, heavy rain can cause flooding and landslides that kill people.

What happened

More than a million people were moved to safety by Sunday evening. Wenzhou moved more than 900,000 people and opened more than 1,500 shelters. Fujian moved 98,900 people from high-risk areas. Shanghai moved 215,600 people by Sunday evening. A weather station in Shanghai recorded its highest 24-hour rainfall in more than 150 years.

Why it matters

Large-scale evacuations protect people from serious injury or death during severe storms. Shanghai's record rainfall shows that the city faces real flood risk from major typhoons, which means it needs to prepare shelters and evacuation plans ahead of time.

Background

Senior police detective Frans Mathipa worked in South Africa. He spent four months trying to get access to key information for a case. Finally, he was told it would come to him soon. But he worried the search might get him killed.

What happened

Two days after being told the information was coming, Mathipa's car was found overturned. He had been shot dead while driving. In August 2023, nine people were charged with his murder. Seven were members of South Africa's special forces. One was a military police officer. They deny the charges. No trial date has been set.

Why it matters

When members of the security forces kill a respected officer, public trust in those institutions breaks down. The case will show whether South Africa's military and police can hold their own people accountable. If they cannot, it signals that powerful institutions operate without real checks.

Background

Daniel Kinahan is a suspected crime boss accused of leading a major drug and weapons operation. The Kinahan cartel has trafficked large amounts of drugs and firearms worldwide for more than 20 years, according to the UK's National Crime Agency. Kinahan was arrested in the United Arab Emirates in April and fought extradition back to Ireland.

What happened

Kinahan appeared in Dublin's Special Criminal Court on Sunday after being extradited from Dubai. He was charged with directing a criminal organization between October 2015 and April 2017. A judge remanded him in custody until October 5.

Why it matters

The case shows how countries work together to pursue suspects who hide overseas. When major crime figures traffic drugs and weapons across borders, law enforcement must coordinate across multiple nations to bring them to court.

Background

The Savannah Police Department uses Flock Safety, a license plate reader system that tracks vehicle movements. The system is meant for real law work. In early August, a review of system use found six employees had searched it for reasons unrelated to actual cases.

What happened

The department fired four officers and two civilian staff members. All six had used the Flock system without proper cause. The Georgia Bureau of Investigation is now running its own criminal investigation into the misuse.

Why it matters

Police access to surveillance tools depends on trust that officers will use them only for real investigations. Unauthorized searches show how easy it is for such systems to be misused. This case highlights why departments need strict oversight of who can access these tools and why.

Background

The cost of living has been a major concern for British households. Prime Minister Andy Burnham is now tackling business practices he says trick people into spending more money.

What happened

Burnham announced a crackdown on fake discounts and subscription traps. Shops will no longer be able to falsely claim products were once much pricier. Companies must make it easy to cancel subscriptions and warn customers when fees will go up.

Why it matters

These changes could save consumers about £400 million a year. If you shop online or use subscriptions, you will see clearer prices and escape unwanted charges more easily. The rules take aim at hidden costs that add up in everyday life.

Background

Generative AI tools, like ChatGPT, can write text on command. Lawyers are starting to use them to draft documents and find legal sources. The tools work fast and can cut costs. But they have a real problem: they sometimes make up facts that sound true.

What happened

David Barniville, president of Ireland's High Court, issued new rules on AI use in court. He warned that lawyers who cite fake sources created by AI will face punishment. Lawyers could be sent to their professional regulator or forced to pay the other side's legal bills.

Why it matters

If your lawyer uses AI to research your case, fake citations could hurt your chances of winning. The court wants lawyers to be honest about what AI they used and to check its work by hand. This means your lawyer will need to verify any sources the AI suggests before filing them in court.

Background

Ocean temperatures outside polar regions have been rising. The EU's Copernicus climate service tracks these global sea temperatures. In July, the seas hit their hottest point ever recorded for that month.

What happened

Average sea surface temperatures outside the cold polar regions reached their highest July level on record. The Atlantic coast and western Mediterranean saw the worst heat. These zones hit higher temperatures than they had in July 2023, the prior record.

Why it matters

Warmer seas affect the fish people eat and the weather patterns that shape daily life. Marine heatwaves can harm fishing and tourism. This trend matters because July 2024 broke a record set just one year prior, showing how fast ocean heat is rising.

Background

The UK is experiencing unprecedented heat this summer. The country has already had four heatwaves since June. Now forecasters say a fifth one is coming this week, with temperatures potentially reaching 36C (97F). The Met Office, the UK's national weather service, is considering issuing rare amber or red extreme heat warnings. These warnings are uncommon and signal serious danger.

What happened

Temperatures will dip slightly on Monday. They will rise again from Tuesday onward. The Met Office meteorologist Tom Morgan said highs will likely reach the mid-30s on Wednesday and Thursday. England and Wales will be most affected. The Midlands and areas farther south could see the highest temperatures.

Why it matters

This sustained heat can damage critical systems people depend on daily. Railway lines can buckle in extreme heat. Power networks can fail under the strain. These failures could disrupt commutes and electricity supply for thousands of people. For now, the country faces the risk of broader outages if this heat continues.

Background

WPForms Lite is a form-building plugin used on over 5 million WordPress sites. WordPress is a platform people use to build websites. In version 2.0.0, released three weeks ago, the plugin's creator Syed Balkhi added hidden code that acts without user knowledge or consent.

What happened

The hidden code is in a file called Bridge.php. When you set up the plugin as an admin, it takes over your browser. It opens an app on WPForms' servers and gives that app a one-hour login token for your site. This token lets their app act as you on your site.

Why it matters

With that token, WPForms' app can install and turn on plugins you did not choose. It can also flip a switch that sends all your form data to WPForms' servers. The plugin never asks first or warns you this is happening. If you run WPForms Lite 2.0.0, your site's data and settings are exposed to changes you did not approve.

Background

The Royal Marines use K3 Scout surveillance drones. These unmanned aircraft carry cameras for spying on targets. A major British defence contractor, Kraken Technology Group, supplied the £12 million fleet to the military. The Royal Marines started using them in March.

What happened

The Telegraph revealed that the drone cameras secretly sent data to China. The cameras had parts made in China. These parts transmitted information to a device inside China. The Ministry of Defence found the breach. It then removed all internet links from the cameras.

Why it matters

This shows how parts bought from other countries can create security holes, even when purchased through British defence contractors. Military systems may now be at risk if their components have hidden ways to send data. The discovery raises questions about how closely the government checks what goes into defence equipment.

Background

MakeUK, a group that represents British manufacturers, surveyed the industry. It found that 30% of manufacturers were hit by a cyber-attack in the past 12 months. Attacks can target a company directly or hit it through its supply chain. The supply chain is the network of vendors and partners that provide parts and services. Nearly a year ago, JLR, Britain's biggest car maker, suffered an attack that shut down production for weeks.

What happened

The MakeUK survey shows the scale of the hacking threat to British factories. In many cases, attacks caused lost production time and higher costs. Yet only half of manufacturers had a plan to respond to an attack. The report highlights how hackers, often backed by hostile nations, are increasingly targeting the industry.

Why it matters

If hackers disrupt a major manufacturer, the impact spreads through the whole economy. Companies that depend on it for parts face delays. Workers lose pay. Customers wait longer for goods. Most manufacturers still lack a response plan, which means another major attack could cause real damage to the UK's industrial base.