GoKawiil
Tech News
A threat actor breached the website of Admin Menu Editor Pro maintainer Janis Elsts and pushed a malicious version 2.35 update that installed a web shell and created a hidden admin account on customer sites. Even after Elsts released a clean version 2.36, the attacker retained access and compromised that release too, affecting an estimated 230 customers and at least 1,500 sites.
Hackers are exploiting an unauthenticated file-upload vulnerability (CVE-2026-27540) in the WooCommerce Wholesale Lead Capture plugin for WordPress, versions 2.0.3.1 and earlier, to install PHP webshells. Wordfence says its firewall has blocked over 100,000 attack attempts, with spikes in June, July and August, and the shells allow attackers to gather site information and upload further malicious files.
Developer Ayghri released i-have-adhd, an open-source skill/plugin for coding assistants like Claude Code that rewrites how the AI communicates: it leads with the next action, numbers steps, gives time estimates, caps lists, and cuts preambles, tangents and closing pleasantries. It installs via a CLI prompt pointing to the project's GitHub repo and can be customized by forking and editing its SKILL.md rules file.
Audacity 4.0 has shipped with a rebuilt Qt-based interface, a new clip-editing model, customizable workspaces, native high-DPI rendering, and a new AUP4 project format. Official Windows builds also gain ASIO playback and recording support alongside broader changes to how the app handles recording, playback, plugins, and projects.
OpenAI has released an Admin plugin for ChatGPT Work and Codex that lets workspace administrators manage users, permissions and spending limits through a chat interface rather than a separate dashboard. The tool can generate usage reports, flag credit thresholds, and handle onboarding or offboarding tasks on request. A company demo showed an admin querying adoption trends and requesting visual breakdowns for a monthly review.
A developer released a Claude Code plugin skill that pulls every highlight from a Kindle book's notebook page, including ones Amazon's export feature truncates or hides entirely due to an undocumented export cap. It reconstructs the missing text by cross-referencing the Mac Kindle app's synced annotation positions and the Cloud Reader's rendered pages, producing one combined, verbatim Markdown file with location citations.