The WordPress Update Was Backdoored, Then Its Replacement Was Compromised Too
Installing the replacement was not enough: the developer says a second intrusion compromised it too. Site owners need a recovery decision, not another green update badge.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Your Pixel’s September Update Fixes a Modem Flaw Google Says May Be Under Attack
Google's September bulletin flags possible targeted exploitation of a Pixel modem flaw, now also listed in CISA's exploited-vulnerability catalogue. The useful check is the installed patch level.
Attackers Are Abusing the Backup Plugin Behind Your Hosting Control Panel
The backup integration behind a hosting control panel has an exploited Linux privilege-escalation flaw. An attacker needs a local foothold first, but that is not where the risk ends.
This Malware Makes Chrome Trust an Extension You Never Approved
The browser can load the malicious extension as though you approved it. Elastic's KREMLIN investigation shows why a familiar banking document can become an endpoint and session-security problem.
Attackers Are Bypassing Cisco ISE’s Login and a Clean Log May Not Mean You’re Safe
The platform deciding who may enter your network has an exploited login bypass. Patching Cisco ISE closes the flaw, but deciding whether a node can still be trusted takes a separate investigation.
Ace & Tate’s Copied Order Details Can Make the Next Scam Look Real
Ace & Tate has confirmed that customer contact, order and delivery details were copied from logistics partner CEVA. The fields can make delivery scams more convincing even though payment data and passwords were not involved.
Researchers Heard Headphone Audio From 30 Metres Away Without Hacking Bluetooth
InjectEave researchers recovered headphone audio through induced electromagnetic leakage from as far as 30 metres in a controlled test. What the experiment does and does not prove.
This Android Ransomware Can Watch Your Screen While Demanding Payment
Mantax Otax combines ransom demands with screen monitoring and message theft. Newer Android limits broad file encryption, but not every other risk.
A Medium-Severity VPN Flaw Put 246,000 Japanese Government Records at Risk
Japan's Digital Agency detected mass file access in June, identified a VPN-vulnerability intrusion in July and disclosed in September that about 246,000 records may have leaked.
AVEVA’s Patch Cannot Secure the Files You Forgot
Four PIMBoards flaws have a vendor fix, but old project files, backups and passwords still need separate handling after the software update.