Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

A sophisticated threat actor, suspected to be a Chinese-speaking individual or group, leveraged novel WordPress and ZyXEL exploits—potentially developed with AI assistance—to steal over 18,000 sensitive government records and compromise nearly a thousand network devices across 48 countries.