/
attack_type:credential_theft × latest_source_host:gbhackers.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 4 fontes · 4 atualizações critical

Rank Math PRO 3.0.123 trojanized in supply chain attack: self-restoring WordPress backdoor (CVE-2026-111862)

The paid WordPress SEO plugin Rank Math PRO was hit by a supply chain attack. Copies of version 3.0.123 downloaded from the vendor's site or delivered as updates between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC contained malware (securityweek.com, thehackernews.com, bleepingcomputer.com). Any site that installed and activ…

CVE-2026-111862 technology
gbhackers.com · high

GhostAction campaign injects credential-stealing GitHub Actions workflows into 790 repositories via hijacked maintainer accounts

GhostAction has returned with an expanded credential-theft operation. By October 9, 2026, attackers had injected malicious GitHub Actions workflows into 790 repositories, according to OpenSourceMalware's validated total. The campaign was first documented by GitGuardian in 2025 (817 repositories, 3,325 stolen secrets). It relies on comprom…

GhostAction technology software development