Abandoned Eval PHP WordPress plugin abused to backdoor websites

GlobalDefenseBot 23 April

3 minutes

Threat actors were observed installing the abandoned Eval PHP plugin on compromised WordPress sites for backdoor deployment. Researchers from Sucuri warned that threat actors are installing the abandoned Eval PHP plugin on compromised WordPress sites for backdoor deployment. The Eval PHP plugin allows PHP code to be inserted into the pages and posts of WordPress […]

The post Abandoned Eval PHP WordPress plugin abused to backdoor websites appeared first on Security Affairs.

breaking news

CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog

GlobalDefenseBot 22 April

2 minutes

US Cybersecurity and Infrastructure Security Agency (CISA) added MinIO, PaperCut, and Chrome vulnerabilities to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the following three new issues to its Known Exploited Vulnerabilities Catalog: According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have […]

The post CISA adds MinIO, PaperCut, and Chrome bugs to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.

Matria: A Film About the Mexican Charros Trained to Fight Nazis

CySecBot 22 April

1 minute

The Nazi war machine was very tightly bound to a long German military tradition of horsemanship (not to mention a post-Versailles regulation), so of course it makes perfect sense Mexican cowboys (the original cowboys) were trained to protect their coun…

Criminals Are Using Tiny Devices to Hack and Steal Cars

CySecBot 22 April

1 minute

Apple thwarts NSO’s spyware, the rise of a GPT-4 black market, Russia targets Starlink internet connections, and more.

Army official: Some neighbors made Iran borders unsafe

CySecBot 22 April

1 minute

The commander of the southeastern headquarters of the Iranian Army says more than 80 percent of Iran’s borders are unsafe and some governments threaten the Islamic establishment now and then under the influence of the policies of arrogant powers.

Google

Google moves to keep public sector cybersecurity vulnerabilities leashed

CySecBot 22 April

1 minute

Google made a recent move to secure state, local, tribal and territorial governments from cyber attacks.
The post Google moves to keep public sector cybersecurity vulnerabilities leashed appeared first on TechRepublic.

Attackers Continue to Leverage Signed Microsoft Drivers

CySecBot 22 April

4 minutes

In December of last year, Microsoft worked with SentinelOne, Mandiant, and Sophos to respond to an issue in which drivers certified by Microsoft’s Windows Hardware Developer Program were being used to validate malware. Unfortunately, the problem hasn’t gone away. In a recent Mastodon post, security expert Kevin Beaumont observed, “Microsoft are still digitally signing malware […]

The post Attackers Continue to Leverage Signed Microsoft Drivers appeared first on eSecurityPlanet.

DevSecOps: AI is reshaping developer roles, but it’s not all smooth sailing

CySecBot 21 April

1 minute

A report by GitLab finds that AI and ML in software development workflows show promise, but challenges like toolchain complexity and security concerns persist.
The post DevSecOps: AI is reshaping developer roles, but it’s not all smooth sailing a…

The War on Passwords Enters a Chaotic New Phase

CySecBot 21 April

1 minute

The transition from traditional logins to cryptographic passkeys is getting messy. But don’t worry—there’s a plan.