{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Wordfence Security News","title":"50,000 Site Ninja Forms File Upload Vulnerability | Anthropic Project Glasswing | Fortinet Zero Day | Wordfence Security News | April 6 2026","html":"","width":"100%","height":180,"duration":415,"description":"This week in Wordfence Security News (Week of Apr 6, 2026):\nAn arbitrary file upload vulnerability in Ninja Forms File Upload puts 50,000+ WordPress sites at risk\nA Fortinet zero-day actively exploited in the wild\nA CERT-EU report reveals a European Commission cloud breach tied to a Trivy supply chain attack — with Cisco source code stolen in the fallout\nAnthropic announces Project Glasswing\nGermany doxes \"UNKN,\" the head of the REvil and GandCrab ransomware gangs\nStory Links:\nNinja Forms File Upload Vulnerability: https://www.wordfence.com/blog/2026/04/50000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-ninja-forms-file-upload-wordpress-plugin/\nFortinet Advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-099\nCERT-EU Report: https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain\nCisco / Trivy Fallout: https://www.bleepingcomputer.com/news/security/cisco-source-code-stolen-in-trivy-linked-dev-environment-breach/\nAnthropic Glasswing Announcement: https://www.anthropic.com/\nKrebs on Security (REvil): https://krebsonsecurity.com/2026/04/germany-doxes-unkn-head-of-ru-ransomware-gangs-revil-gandcrab/\nStay informed and secure: get the latest WordPress security news on the Wordfence blog or subscribe to the WordPress Security Newsletter.","thumbnail_url":"https://img.transistorcdn.com/tNZ1BCLBa7hdisGHRggcQKe1fS0BRjNwLU5euMPMXfE/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8yNjZm/M2NiNzczNWQ4MDdh/OTYyMTg5MDQ5ODk3/ODI5ZC5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}