12 casos · pág. 1/1
Rank Math reported a security incident in which its premium Rank Math PRO WordPress plugin, version 3.0.123, was distributed with malware. Sites are at risk if administrators activated the compromised version. The affected download window ran from October 15, 2023 20:02 UTC to October 16, 2023 07:12 UTC (dates as stated in the article), a…
A supply-chain attack compromised Rank Math PRO (WordPress SEO plugin) version 3.0.123, downloaded from the vendor's official website between October 15 20:02 UTC and October 16 07:12 UTC. The trojanized package planted persistent, self-recreating hidden backdoors on sites where it was activated, and exposed database credentials, API keys…
The Rank Math PRO WordPress SEO plugin was hit by a supply chain attack. Some packages of version 3.0.123 contained malware that could let attackers take over websites once the plugin was activated. Users who downloaded or updated the plugin between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC may be infected. Rank Math remov…
Infoblox attributes the long-running Help TDS traffic distribution system, active since at least April 2017, to Hotejka, a small Russian-language affiliate program that appears to be a rebrand of ROI777 (exposed in 2018). The TDS fingerprints visitors and redirects them to browser-lock tech support scams that push victims to call centers,…
GreyNoise reports that a single malicious cyber actor, tracked since 7 May 2026, is a suspected Chinese speaker working in UTC+8 and is the same as or related to Red Heron (reported by Acronis), based on the shared C2 domain, malware family, Gitea exploitation and other TTPs. The actor exploited the wp2shell WordPress chain (CVE-2026-6303…
Infoblox links the long-running Help TDS traffic distribution system, active since at least 2017, to the Russian-language affiliate program Hotejka, assessed with high confidence to be a rebrand of the traffic monetization operation ROI777. Help TDS supplies PHP templates and a malicious WordPress plugin that affiliates install on comprom…
F5 Labs honeynet telemetry shows overall hostile activity rising 55.5% month over month in June 2026, a return to the levels of the earlier-year spike. Highlighted is CVE-2024-44000, an unauthenticated account takeover flaw (CVSS 9.8, CWE-522) in the LiteSpeed Cache WordPress plugin, which rose by 1,128 to 2,603 attacks (8). Scanning is i…
Patchstack reports a critical remote code execution vulnerability in PHP that is already being actively exploited after details leaked on October 20. Because the flaw sits in the language runtime, any PHP-based application on a vulnerable version is exposed, including WordPress, Drupal, Magento, Joomla and Laravel sites. Patchstack confir…
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
A joint advisory (AA26-281A) attributes China-based malicious cyber activity to Integrity Technology Group (Integrity Tech), a for-profit company with links to the Chinese government. The company builds and sells tools, hosts infrastructure and compromises networks worldwide. The actors' TTPs are consistent with Flax Typhoon, Ethereal Pan…
Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …
The PHP security team announced an emergency security release for October 21, 2026 at 14:00 UTC, one day earlier than the leaked disclosure date. It addresses two critical flaws, CVE-2026-109618 and CVE-2026-109619 (dubbed php2shell), both rated CVSS v4.0 9.2. Leaked reports cited CVSS 10.0 and an impact reaching back to PHP 5, but PHP ha…
