{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Wordfence Security News","title":"MW WP Form 200K Sites at Risk | Axios Hack | Cisco Breach | Wordfence Security News | March 30, 2026","html":"","width":"100%","height":180,"duration":442,"description":"This week in Wordfence Security News (Week of Mar 30, 2026): Over 200,000 WordPress sites at risk from an unauthenticated arbitrary file move vulnerability in the MW WP Form plugin, allowing full site takeoverMassive spike in exploitation attempts targeting the Kali Forms RCE vulnerability, with activity increasing over 60x week-over-weekA major supply chain attack compromises the widely used Axios JavaScript library, distributing backdoored versions to developers worldwide Active exploitation of a critical Citrix NetScaler vulnerability enabling session hijacking and potential full appliance compromiseEuropean Commission confirms a cloud breach with data theft claims by ShinyHuntersCisco internal development environment breached via poisoned Trivy supply chain attack, exposing source code and credentialsTimestamps:\n\n0:00 Introduction\n0:30 MW WP Form Vulnerability\n1:15 Kali Forms Exploitation Surge\n1:55 Axios Supply Chain Attack\n3:20 Citrix NetScaler Active Exploitation\n4:57 European Commission Breach\n5:50 Cisco Dev Environment Breach\n6:47 Wrap up discussion\nStory Links:MW WP Form VulnerabilityKali Forms Exploitation UpdateAxios Supply Chain Attack (Wiz)Citrix NetScaler AdvisoryEuropean Commission Breach (Bloomberg)Cisco / Trivy Supply Chain AttackStay informed and secure: get the latest WordPress security news on the Wordfence blog or subscribe to the WordPress Security Newsletter.  ","thumbnail_url":"https://img.transistorcdn.com/tNZ1BCLBa7hdisGHRggcQKe1fS0BRjNwLU5euMPMXfE/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8yNjZm/M2NiNzczNWQ4MDdh/OTYyMTg5MDQ5ODk3/ODI5ZC5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}