A new Singapore Study has found that four in five websites run by local businesses carry at least one detectable WordPress vulnerabilities. The Singapore WordPress Website Cybersecurity Study, released by Equinet Academy on August 31, 2026, in partnership with Cutlazz Cyber Consulting, examined 102 publicly accessible WordPress sites operated by Singapore-based businesses.   Using passive, automated scanning between April and August 2026, researchers found that 80.4% of the sites had at least one identifiable vulnerability, and 33.3% fell into the High or Critical Risk categories. Seven sites were rated Critical Risk.  Across the sample, 1,853 confirmed vulnerabilities were matched to documented CVEs, and the average risk score came in at 42.1 out of 100 — placing the group at the upper end of "Elevated Risk." 

Outdated Software Drives WordPress Vulnerabilities 

Aging software was a recurring theme. Of the 102 sites, 41 (40.2%) were running outdated WordPress core versions, some dating back to 2015. Notably, every site flagged Critical Risk was also running outdated core software.  Plugins added further exposure: 70.6% of sites had at least one plugin with a confirmed CVE, and 65.7% had at least one outdated plugin, with 199 outdated plugin installations counted overall.  Other findings included: 

• 56.9% had XML-RPC publicly exposed 
• 54.9% had wp-cron publicly accessible 
• 29.4% revealed their login path through robots.txt 

Most Gaps Stem From Routine Maintenance, Not Sophisticated Attacks 

The study concluded that many of these vulnerabilities in CMS setups weren't the product of advanced hacking techniques but of neglected upkeep and default configurations left unchanged.  Dylan Sun, Founder and Managing Director of Equinet Academy, said the results show that WordPress security often comes down to basics rather than elaborate defenses. He noted that unpatched software and unreviewed configurations accumulate risk over time, and that regularly updating systems and checking public-facing exposure are practical ways businesses can cut down avoidable risk. 

Methodology and Limitations 

Researchers used the WPSec Automated Scanner to assess publicly visible data — WordPress versions, plugin inventories, CVE matches, header configurations, and exposed endpoints — without attempting authenticated access, brute-force entry, or exploitation of any flaws found.   The results reflect a snapshot of visible indicators rather than a full audit, and a detected vulnerability doesn't necessarily mean a site has been breached. Still, the study points out that the same information is just as discoverable to potential attackers running routine scans. 

Compliance and Business Implications 

For sites that collect personal data, unresolved vulnerabilities in CMS software may also carry compliance risk under Singapore's Personal Data Protection Act (PDPA), which requires reasonable security safeguards.  The report recommends businesses adopt HTTPS across their sites, keep WordPress core and plugins current, disable unused XML-RPC functionality, review login-path visibility, restrict access to files like readme.html and wp-cron.php, and run security scans at least quarterly.  The Singapore Study analyzed sites selected by Singapore-registered domains or Singapore-hosted IPs, focusing on small and medium-sized businesses while excluding multinational subsidiaries. 

A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces. Nintendo confirmed the vulnerability in Nintendo Switch systems in a PDF advisory released Sept. 10, just a day after quietly shipping firmware version 23.0.0 to address the problem.  Importantly, this vulnerability in Nintendo Switch hardware is limited to the original console. The Nintendo Switch 2 is not affected in any way. 

How the Nintendo Switch Vulnerability Works? 

The flaw centers on the Send to Smartphone feature, a tool original Switch owners use to move screenshots and game captures onto a phone by scanning a QR code generated on the console. That same QR-code mechanism is also used by Super Mario Kart: Home Circuit when played on its physical cartridge, since the game relies on a QR code to establish a wireless connection between nearby players.  The danger arises when someone other than the intended user scans that QR code first. Doing so lets a stranger's device link up with the Switch console, opening the door to running unauthorized code on the machine or pulling data straight off it. Because account information lives on the console itself, that's a real risk for anyone exposed to this Nintendo Switch vulnerability while gaming around others.  Nintendo has not offered additional detail beyond its advisory. A company representative did not immediately respond when asked for further comment on the matter.  The vulnerability in Nintendo Switch firmware has been formally logged as CVE-2026-82079. It's described as a stack-based buffer overflow, a type of flaw that can allow an attacker within wireless range to execute code on the device. The issue only exists on original Switch consoles running firmware older than version 23.0.0; anything on that version or newer is already protected. 

Fixing the Nintendo Switch Vulnerability 

Nintendo's remedy is straightforward: install firmware 23.0.0, which the company released Sept. 9, one day before publicly disclosing the flaw. To do so, owners should navigate to System Settings, then System, then System Update, and follow any prompts that appear on screen to complete the installation.  For anyone who can't update right away, Nintendo has outlined a few stopgap measures. The company suggests only using the Send to Smartphone feature at home, where a stranger isn't in scanning range, and avoiding public sessions of Super Mario Kart: Home Circuit until the update is applied. More broadly, Nintendo advises against ever scanning a QR code using a device that isn't your own.  Players who exclusively game at home are already shielded from this particular vulnerability in Nintendo Switch systems and don't need to take any further action, since the exploit depends on a nearby attacker being in physical wireless range to intercept the QR code.  Given how quickly Nintendo moved from patch release to public disclosure — releasing the fix Sept. 9 and detailing the vulnerability the very next day — owners are being urged to update sooner rather than later, especially if they regularly play in cafes, transit, or other shared spaces where an unfamiliar device could realistically pick up a stray QR code. 

The International Meteor Organization cyberattack has knocked much of the Belgium-based nonprofit's website offline, with the organization warning that several weeks of partial downtime could follow as it moves to new infrastructure and services. The International Meteor Organization (IMO), which coordinates meteor observations and connects amateur and professional astronomers worldwide, is currently operating a stripped-down holding page following the incident. The organization said the attack dealt a "critical blow" to its aging infrastructure. "We recently suffered a cyberattack that dealt a critical blow to aging infrastructure, taking much of our site offline," IMO said in a notice. "We expect several weeks of partial downtime as we transition to new infrastructure and services."

International Meteor Organization Cyberattack Disrupts Services

IMO has not disclosed when the attack took place, how attackers gained access to its systems, or whether any information was accessed or encrypted during the incident. The organization collects observations from people who report unusually bright meteors, commonly known as fireballs. These observations help document and analyze such events, making the reporting service one of the key functions affected by the disruption. Following the IMO cyberattack, the organization said it prioritized restoring its fireball reporting capability. That service is now available again, allowing people who witness a fireball or bright light in the sky to submit their observations. Other sections of the website remain unavailable as IMO works to rebuild its infrastructure.

Aging Infrastructure Faces Extended Recovery

The expected recovery period indicates that the disruption extends beyond a simple website outage. IMO said it is transitioning to new infrastructure and services, with partial downtime expected to continue for several weeks. However, the organization has not provided details about the extent of the infrastructure damage or identified the specific systems affected by the attack. The incident also raises questions about information stored on the affected systems. IMO operates services used by meteor observers and members across the world, but it has not confirmed whether user or contributor information was exposed. At this stage, there is also no information from the organization indicating whether data was encrypted or stolen.

IMO Yet to Disclose Attack Details

The International Meteor Organization cyberattack remains limited in publicly disclosed details. IMO has not said who was responsible, when the intrusion occurred, or what method was used to compromise its infrastructure. The organization has also not disclosed whether it has identified any potential attackers or determined whether data was accessed during the incident. The Cyber Express contacted IMO seeking additional information about the timing of the attack, the systems affected, whether any data was compromised, and whether the organization has identified those responsible. No response had been received at the time of publication. For now, IMO's fireball reporting service has been restored, while other website functions remain offline. The organization expects the wider recovery process to take several weeks as it transitions away from its affected infrastructure. The incident leaves the full impact of the attack unclear, with further details dependent on IMO's ongoing investigation and infrastructure recovery.

Nearly four in 10 UK small firms were hit by a successful cyberattack in the past year, according to the latest Hiscox Cyber Readiness Report. The UK cyberattack rate reached 38%, significantly above the 29% global average recorded among nearly 7,000 smaller businesses surveyed worldwide.

The 10th annual report surveyed cybersecurity decision-makers at smaller firms, including 1,000 respondents in the UK. Britain recorded the highest attack rate among the markets included in the research. Globally, businesses that experienced an incident reported an average of four attacks during the past 12 months.

UK cyberattack Rate Outpaces Global Average

The findings place UK small businesses at greater exposure to successful cyberattacks than their international counterparts. While 29% of organisations globally reported a successful attack, the figure rose to 38% among small UK businesses.

The report also found that cyber incidents are creating measurable financial and operational costs. Globally, each incident cost organisations an average of $52,000 and resulted in around 32 hours of operational disruption.

In the UK, the average cost per cyberattack was $35,908, equivalent to £26,650. Although that figure was below the global average, the higher frequency of attacks means UK firms are more likely to encounter those costs.

The global attack rate also fell from the 59% figure reported in Hiscox's previous annual report. However, the two figures are not directly comparable because last year's research surveyed a broader group of 5,750 businesses across seven markets, while this year's report focuses specifically on almost 7,000 smaller firms.

Cyber Incidents Affect Business Growth

Cyber incidents are also influencing business decisions beyond immediate recovery costs. Globally, 32% of affected firms said cyber incidents delayed growth and expansion plans.

Other reported consequences included higher staffing costs for 31% of businesses, direct financial damage for 30%, and lost business opportunities for 29%.

Reputation and customer trust ranked as the most significant cyber-related risk, cited by 48% of businesses surveyed. Operational downtime or business interruption followed at 46%, while supply chain or third-party disruption was identified by 44%.

Among firms that experienced an incident, 28% faced financial penalties and 26% experienced damaging publicity.

UK Firms Increase Cyber Resilience Spending

Businesses are responding to the continuing threat by increasing spending on cyber resilience. The global average investment reached $51,000, with firms directing spending toward new technology, specialist staff and employee training.

New technology was adopted by 51% of firms, while 55% invested in specialist staff and 62% updated employee training.

UK businesses reported considerably higher spending, averaging $59,700, or £44,294, on cyber resilience. That placed the UK third among the markets surveyed for resilience spending.

The report also identified a growing connection between cybersecurity performance and executive compensation. Globally, 32% of firms said executive pay is now linked to cybersecurity performance. Among UK small firms, the figure was 25%.

Cyber Insurance Gap Remains

The findings also highlight a continuing gap between cybersecurity exposure and insurance uptake in the UK. Government data from the Department for Science, Innovation and Technology shows that 10% of UK businesses and 5% of charities hold a dedicated cyber insurance policy.

Separate research cited in the report found that just over 40% of UK SMEs hold cyber insurance, compared with around 63% of medium-sized firms and approximately 70% of FTSE 100 companies.

The latest Hiscox findings therefore show a combination of high cyberattack exposure, substantial investment in cyber resilience, and relatively limited cyber insurance uptake among UK businesses.