Iran-Linked Hackers Breach FBI Director's Email | Wordfence Security News| Week of March 23, 2026

This week in Wordfence Security News (Week of Mar 23, 2026): Same-day exploitation of a critical RCE vulnerability in the Kali Forms plugin, attackers can achieve full admin takeover with a single requestOngoing mass exploitation of the s2Member plugin targeting password reset functionalityBreaking News: Iran-linked hackers claim breach of FBI Director Kash Patel’s personal emailA critical Cisco firewall management vulnerability exploited as a zero-day by ransomware actorsFBI and CISA warn of phishing campaigns targeting messaging app accountsTimestamps:0:00 Introduction0:25 Kali Forms RCE Vulnerability1:34 s2Member Mass Exploitation2:20 Breaking News – FBI Email Breach2:45 Cisco Firewall RCE Exploitation5:03 Messaging App Phishing CampaignsStory Links:Kali Forms RCE Vulnerability: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/kali-forms/kali-forms-249-unauthenticated-remote-code-execution-via-form-processs2Member Exploitation Campaign: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/s2member/s2member-260127-unauthenticated-privilege-escalation-via-account-takeoverCisco Firewall Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJhInterlock Ransomware Coverage: https://www.ic3.gov/PSA/2026/PSA260320Reuters – FBI Email Breach: https://www.reuters.com/world/us/iran-linked-hackers-claim-breach-of-fbi-directors-personal-email-doj-official-2026-03-27/Stay informed and secure: get the latest WordPress security news on the Wordfence blog or subscribe to the WordPress Security Newsletter.