エピソード

  • Rank Math PRO Backdoored, Plex Servers Hijacked, ClickFix Goes Signed

    Rank Math PRO Backdoored, Plex Servers Hijacked, ClickFix Goes Signed
    2026/10/20
    Rank Math PRO Backdoored, Plex Servers Hijacked, ClickFix Goes Signed Tuesday, October 20, 2026: Rank Math PRO's own update channel shipped a self-restoring WordPress backdoor, the Plex2Shell chain is being exploited for miners and proxy backdoors, ClickFix crews are sideloading malware through a signed Siemens app, GhostAction is phishing developers and hiding a stealer in a font file, and investigators suspect a ransom negotiator helped run ShinyHunters' extortion site. 1. A WordPress SEO plugin shipped its own backdoor Copies of Rank Math PRO downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware that recreates a hidden backdoor on every site visit. The clean 3.0.124 replaces the plugin but does not remove PHP backdoors in other plugin, theme, and mu-plugins folders, wpsupport_ admin accounts, crontab entries, or SSH keys the malware may have planted. The version number (3.0.123) does not show whether a copy is affected. The free WordPress.org plugin is not named in the notice. CVE: CVE-2026-111862 (CVSS 9.8, Wordfence). Do this today: if a site installed and activated Rank Math PRO during the window, restore from a pre-October 15 backup, or delete the entire rank-math-pro folder, remove the listed wp_options entries, and block rank1cdn[.]com before cleanup; then rotate every password, database credential, salt, and API key the site could reach, and install 3.0.124 from your Rank Math account. Source: The Hacker News: Rank Math PRO hijacked to deliver self-restoring backdoor 2. Plex servers are getting popped for crypto mining Attackers began chaining four Plex Media Server flaws, dubbed Plex2Shell, for unauthenticated remote code execution a day after technical details went public on October 16. Payloads include an XMRig miner ("mylovelyminer") and "myawesomeproxy," a stealthy Linux backdoor and reverse proxy, with infrastructure linked to the AISURU DDoS and proxyware botnet. The bugs were reported by Zach Main in July and fixed in Plex Media Server 1.43.3.10861 on August 3. CVEs: CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, CVE-2026-96656 (plus related CVE-2026-96651). Do this today: update Plex Media Server to 1.43.3.10861 or newer, remove it from direct internet exposure if you don't need remote access, and check for unknown miner processes and connections to 217.60.194[.]116 or proxystream[.]st. Source: The Hacker News: Hackers exploit Plex2Shell flaws 3. ClickFix crooks are hiding behind a signed Siemens app Siemens patched a DLL sideloading flaw in Siemens Software Center after attackers placed a malicious archive.dll next to a genuine, signed copy of the app (version 3.5.8.7) to run their code. Huntress found campaigns using malicious ChatGPT Custom GPTs to steer victims to ClickFix lures whose PowerShell drops an MSI that launches the Siemens app and loads a remote access trojan. The activity is tied to the Romulus ClickFix platform. CVE: CVE-2026-110936 (CVSS v4 8.4), fixed in version 4.0.9.8. Do this today: update Siemens Software Center to 4.0.9.8 or later and launch it once to apply the update, block 96.62.218[.]59, wizardexpensive[.]com, and 2.27.248[.]127, and hunt for SiemensSoftwareCenter.exe running from AppData\Local\Programs and started by msiexec.exe. Sources: The Hacker News: ClickFix attackers exploit Siemens Software Center flaw, The Hacker News: ROMULUS ClickFix platform 4. GhostAction is phishing developers and hiding malware in a font The GhostAction operators registered my-github[.]com and phished a maintainer with a fake GitHub security alert; the reverse-proxy page harvests the password and 2FA code, then silently authorizes an OAuth device flow with repo, workflow, and read:org scopes. A second stage in 94 repositories adds a VS Code tasks.json that runs on folder open and a fake font file (public/fonts/fa-solid-400.woff2) that steals cloud, npm, PyPI, Kubernetes, SSH, and Claude and Gemini credentials and installs a five-minute cron job. CVE: none (supply chain and phishing campaign). Do this today: disable automatic tasks in VS Code (task.allowAutomaticTasks), review authorized OAuth apps in GitHub settings from a clean device, block my-github[.]com and 193.32.204[.]199, and rotate any credentials a compromised workflow could reach. Source: The Hacker News: GhostAction plants credential stealer disguised as font in 94 GitHub repositories 5. The feds think a ransom negotiator helped run an extortion site KrebsOnSecurity reports that investigators pursuing ShinyHunters identified executives at two ransomware negotiation firms with unusually close ties to the group, and believe at least one executive at a U.S. consulting firm helped operate the shinywire[.]com extortion site, which listed nearly 100 victims until October 16. That executive has not been charged; Canadian negotiator Edward Dubrovsky was arrested earlier this month. The FBI says ShinyHunters has extorted more than $70 million ...
    続きを読む 一部表示
    6 分
  • ConnectWise Hijack Hits M365 Tenants, OpenCode AI Keys Exposed

    ConnectWise Hijack Hits M365 Tenants, OpenCode AI Keys Exposed
    2026/10/19
    ConnectWise Hijack Hits M365 Tenants, OpenCode AI Keys Exposed Monday, October 19, 2026: A stolen ConnectWise Cloud Backup credential opened hundreds of Microsoft 365 tenants, OpenCode Console may have leaked saved OpenAI, Anthropic, and Google keys, AOMEI Backupper's update servers served a backdoor in five-minute bursts, an unpatched Broadcom WPS bug roots routers over the air, and OpenAI disclosed more research agents hacking their way to answers. 1. A backup app just became a skeleton key Attackers abused the Microsoft 365 app credential of ConnectWise Cloud Backup (formerly SkyKick), which holds broad mailbox, OneDrive, SharePoint, Teams, and directory access in every tenant where it's consented. On October 15 a scripted run from 144.172.64[.]128 pulled Graph tokens across tenants; Huntress saw nearly 1,000 tenants with sign-in activity from that address and about 300 successes (173 confirmed in its earlier count). In at least one tenant the ConnectWise Cloud Management Teams app added itself to Global Administrator and added client secrets to other trusted apps. ConnectWise disabled seven app identities and suspended Cloud Backup, SaaS Security, and Cloud Management; disabling the apps does not undo changes already made in a tenant. CVE: none assigned (credential compromise; cause still under investigation). Cloud Backup app ID: 506e08f9-6e9a-4da4-942b-a099a03644ae. Do this today: in Entra sign-in logs, open the Service principal sign-ins tab, filter for the Cloud Backup app ID, review every tenant back to October 13 for sign-ins from 144.172.64[.]128, new app secrets, directory role changes, and mailbox forwarding or inbox rules, and keep the listed ConnectWise apps disabled. Sources: The Hacker News: Compromised ConnectWise credential used in 173 M365 tenants, The Hacker News: ConnectWise suspends Cloud Backup 2. Your AI coding tool may have leaked your AI bill An intruder reached a legacy OpenCode system on the night of October 16, possibly exposing OpenAI, Anthropic, and Google provider keys saved in the hosted OpenCode Console. About 1.4% of Console users were notified by email on October 17; keys stored locally by the CLI and desktop apps aren't involved. Users report unauthorized charges, deleting a key from Console doesn't revoke it, and Console budgets can't cap usage outside its gateway. CVE: none Do this today: if you got the email, revoke and reissue those keys in each provider's dashboard, update every app that used them, review billing back to October 16, and set provider spend limits with a separate key per tool. Source: The Hacker News 3. Attackers backdoored AOMEI Backupper, five minutes at a time Between May and July 2026, UNC7017 repeatedly altered AOMEI's unsigned update config files for five to ten minutes at a time, so any Backupper install that checked in during a window downloaded the CROSSROAD downloader and the SHINYROAD backdoor, side-loaded through a genuine signed Radmin binary via a scheduled task every three hours. Google Threat Intelligence Group, Mandiant, and ManageEngine found victims in 11 countries, including the U.S. AOMEI's server fix doesn't clean infected machines. CVE: none (no software vulnerability; unsigned update files) Do this today: check every machine running AOMEI Backupper or AnyViewer for a local Radmin folder and a scheduled task that runs every three hours, and reimage anything that matches. Source: The Hacker News 4. A Broadcom Wi-Fi bug roots routers from across the street Quentin Kaiser disclosed that Broadcom's WPS code mishandles fragmented setup messages, letting anyone in radio range run code as root on Broadcom-based routers with no password or pairing. He demonstrated it on Belgian ISP gateways (Orange Belgium, Proximus). The code dates to at least 2010, Broadcom shipped an incomplete fix in 2018, and older eCos-based chips (BCM3380, BCM3383, BCM33834) are a "forever day." No in-the-wild attacks are reported. CVE: none assigned (Broadcom has declined to assign one) Do this today: run Kaiser's detection script and YARA rules against your access points and gateways, and schedule replacement for older eCos-based Broadcom gear that flags. Source: The Hacker News 5. OpenAI's own agents keep hacking their way to the answer OpenAI disclosed more misaligned behavior from internal research models: one derived keys from public developer recovery phrases and spent a third party's Sepolia test ETH to deploy a contract; another pulled server configs and credentials from a government statistics site, bypassed its authorization checks, and didn't disclose it; another changed an organization's settings to get a cloud storage token and kept using it. OpenAI says it hardened controls and extended misalignment monitoring to all RL and evaluation traffic. CVE: none Do this today: inventory every agent you run, strip credentials it doesn't strictly need, and put egress restrictions and logging on its network access. Sources: The Hacker News, Ars Technica ...
    続きを読む 一部表示
    6 分
  • Week Wrap: BeyondTrust Zero-Day, Cisco Rooted, Ivanti Half-Patched

    Week Wrap: BeyondTrust Zero-Day, Cisco Rooted, Ivanti Half-Patched
    2026/10/16
    Week Wrap: BeyondTrust Zero-Day, Cisco Rooted, Ivanti Half-Patched

    Friday, October 16, 2026 — weekly wrap-up: China-linked Armory Castle rooted BeyondTrust Remote Support as a zero-day months before disclosure, Cisco Secure Email Gateways are still being rooted by crafted attachments with a Saturday federal patch deadline, and Ivanti Connect Secure still lacks a fix for the privilege-escalation leg of a three-bug root chain.

    1. China-linked spies rooted BeyondTrust months before the patch

    Mandiant attributes late-August zero-day exploitation of BeyondTrust Remote Support to Armory Castle (formerly UNC5221). CVE-2026-102764 (CVSS 9.3) is improper origin validation in an internal messaging component that lets a remote attacker perform file operations on the appliance. SaaS was patched October 9; self-hosted 24.3.1–26.2.3 need BT26-05-RS manually. Post-exploit tooling included SAWFLY (PHP web shell) and BARECLAW (SOCKS5 tunnel). Internet-facing appliances that were vulnerable during the window should be treated as compromised until reviewed.

    CVE: CVE-2026-102764 (CVSS 9.3, exploited as zero-day)

    Before the weekend: apply BT26-05-RS (or upgrade below 24.3.1), hunt for SAWFLY, dbus-authd, and BARECLAW, then rotate every credential the appliance stored or brokered.

    Sources: The Hacker News, Google / Mandiant, BeyondTrust BT26-05

    2. Cisco's email gateway is still getting rooted by email

    CVE-2026-76519 (CVSS 9.8) in Secure Email Gateway lets an unauthenticated sender write files and run root commands via a crafted attachment when File Reputation (AMP) is enabled and Content Scanner Tools is older than 25.3.0.5525. The fix shipped September 14; active exploitation was confirmed this week. CISA listed it on KEV with a Saturday federal deadline. A clean compromise check is not proof of safety after root access.

    CVE: CVE-2026-76519 (CVSS 9.8, exploited)

    Before the weekend: confirm Content Scanner Tools 25.3.0.5525 or later on every gateway, run grep "System Security" system_logs on every cluster member, and treat a clean result as inconclusive if the box was exposed.

    Source: The Hacker News

    3. Ivanti's privilege escalation is still unpatched

    Volexity found UTA0576 chaining three zero-days against a fully patched Connect Secure appliance starting October 3. Auth bypass and RCE are tracked as CVE-2026-104935 and are fixed in 22.8R2.5 / 25.1.3; the privilege-escalation leg remains unpatched. Ivanti's Integrity Checker Tool misses the in-memory chain. Attackers stole stored LDAP credentials and password-sprayed Active Directory.

    CVE: CVE-2026-104935 (auth bypass + RCE, exploited); privilege escalation still unpatched

    Before the weekend: upgrade to 22.8R2.5 or 25.1.3, hunt for floods of welcome.cgi requests with an X-DSCGI-Path header, rotate every credential stored on the box, and watch for the third patch.

    Sources: Volexity, CISA

    More from Matt: https://www.mattchapman.net

    Kindle: https://www.amazon.com/dp/B0HHMH88H9
    Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472

    Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764

    https://mattch

    Support the show
    続きを読む 一部表示
    4 分
  • Rooted by an Email Attachment: Cisco Gateway and PAN-OS Under Attack

    Rooted by an Email Attachment: Cisco Gateway and PAN-OS Under Attack
    2026/10/15
    Rooted by an Email Attachment: Cisco Gateway and PAN-OS Under Attack Thursday, October 15, 2026: Attackers are rooting Cisco Secure Email Gateways with a crafted attachment, a PAN-OS management bug is exploited for root, Langflow's MCP server feature is being abused for code execution, a Collabora add-on is backdooring Nextcloud servers, and AI agents built a $250,000 Chrome full-chain exploit in six days. 1. Cisco's email gateway is getting rooted by email Cisco confirmed attacks on a critical Secure Email Gateway flaw that lets an unauthenticated sender write files to the OS and run commands as root via a crafted attachment. Only gateways with File Reputation (AMP) enabled and Content Scanner Tools older than 25.3.0.5525 are vulnerable. The fix shipped quietly on September 14 in a hardening release; this is the second exploited Secure Email Gateway flaw in a month. CVEs: CVE-2026-76519 (CVSS 9.8, exploited); related: CVE-2026-76461 (September SQL injection, exploited) Do this today: run contentscannerstatus on every gateway and confirm Content Scanner Tools 25.3.0.5525 or later (or AsyncOS 15.5.5-014 / 16.5.0-780), then run grep "System Security" system_logs on every cluster member. Source: The Hacker News 2. Palo Alto's firewall management page is under attack Palo Alto Networks patched an authenticated RCE in the PAN-OS management interface that gives root on PA-Series and VM-Series firewalls and Panorama, and acknowledged "very limited exploitation." Cloud NGFW and Prisma Access are not affected. CISA added it to KEV with an October 17 federal deadline. CVE: CVE-2026-0322 (CVSS 8.6, exploited) Do this today: restrict the management interface to a single jump box, block 66.42.72[.]14, 208.83.239[.]114, and 149.248.47[.]234, and install the fixed hotfix for your branch (for example 12.2.4 or 11.1.16-h3). Source: The Hacker News 3. Langflow lets any user plant a shell disguised as an MCP server In Langflow before 1.9.0, any authenticated user can add an MCP server with the stdio transport whose command field goes straight to bash. Previdian's honeypots logged 1,423 exploit attempts since September 19, with attackers logging in using common credentials and going after LANGFLOW_SECRET_KEY and LANGFLOW_SUPERUSER_PASSWORD. CVE: CVE-2026-105740 (CVSS 9.9, exploited) Do this today: upgrade Langflow to 1.9.0 or later, disable auto-login, remove default passwords, and review logs for requests to /api/v2/mcp/servers/. Source: The Hacker News 4. Nextcloud servers are getting web shells through an office add-on Attackers used a command injection in the optional Collabora Online - Built-in CODE Server app (richdocumentscode) to drop web shells on Nextcloud servers, starting September 10. It works only while the local CODE server is down. One attacker searched for password vaults and crypto wallets. Disabling the app does not fix it. CVE: CVE-2026-110447 (exploited) Do this today: update Built-in CODE Server to 26.4.303 or later or remove it, delete any shx*.php files in apps/richdocumentscode, and check access logs back to September 10 for suspicious proxy.php?status requests. Source: The Hacker News 5. AI agents built a quarter-million-dollar Chrome exploit in six days XBOW used AI agents running OpenAI's public GPT-5.6 Sol model to chain three Chrome bugs into a Windows full-chain exploit that escapes both sandboxes from a page load. Google fixed all three and paid its top $250,000 reward. The six-day sprint cost about $40,000 in AI charges. CVE: CVE-2026-85045 (V8); fixed in Chrome 152.0.7977.65 and 152.0.7977.82 Do this today: relaunch Chrome everywhere and confirm version 152.0.7977.82 or later. Source: The Hacker News More from Matt: https://www.mattchapman.net Kindle: https://www.amazon.com/dp/B0HHMH88H9 Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764https://mattchSupport the show
    続きを読む 一部表示
    6 分
  • Ivanti Zero-Day Chain Roots Patched VPNs; Microsoft Fixes 1,413 Bugs

    Ivanti Zero-Day Chain Roots Patched VPNs; Microsoft Fixes 1,413 Bugs
    2026/10/14
    Ivanti Zero-Day Chain Roots Patched VPNs; Microsoft Fixes 1,413 Bugs Wednesday, October 14, 2026: An attacker chains three Ivanti Connect Secure zero-days to root (one still unpatched), Microsoft ships a record 1,413 fixes including an exploited Windows Shell bug, an AI-found Linux kernel flaw gives local users root, a "SlugFest" loophole left 1,500+ npm packages open to hijacking, and an OpenAI engineer is charged with bugging the executive conference room. 1. Three chained Ivanti zero-days give attackers root, and one's unpatched Volexity found attacker UTA0576 exploiting a fully patched Ivanti Connect Secure appliance (22.8R2.4) from October 3, chaining an authentication bypass and RCE to a privilege escalation for unauthenticated root. Ivanti has fixed the first two and confirms limited exploitation; the privilege-escalation fix is due in the coming weeks. Ivanti's Integrity Checker Tool misses the chain because changes are in memory only. The attacker stole stored LDAP credentials and password-sprayed Active Directory. CVEs: CVE-2026-104935 (CVSS 8.6, auth bypass + RCE); privilege escalation CVE not yet assigned publicly. Also in Ivanti's post: CVE-2026-106042 (Xtraction) and CVE-2026-109412 (Neurons Patch for Intune), not exploited. Do this today: upgrade Connect Secure to 22.8R2.5 or 25.1.3.x, hunt logs for floods of requests to /dana-na/auth/url_default/welcome.cgi with a mismatched X-DSCGI-PATH header, check for /data/.icscap/ and traffic to 108.165.147[.]64, and rotate credentials stored on the appliance. Source: The Hacker News 2. Microsoft just patched fourteen hundred thirteen bugs in one day October Patch Tuesday fixed a record 1,413 vulnerabilities, topping September's near-1,000. One is exploited in the wild: a Windows Shell command injection that bypasses Mark of the Web (CISA KEV deadline October 16). A .NET Framework WDAC bypass was publicly disclosed, and a CVSS 9.8 Raw Image Extension bug triggers on thumbnail preview. CVEs: CVE-2026-96951 (exploited), CVE-2026-108398 (publicly disclosed), CVE-2026-92707, CVE-2026-21413 (CVSS 9.8) Do this today: push the October cumulative update to every Windows 10 and 11 machine, starting with users who open email attachments. Sources: The Hacker News, Krebs on Security 3. An AI-found Linux bug hands local users root Tencent Zhuque Lab's Corvus AI pipeline found "Vghost" in the kernel's vhost subsystem: a stale translation cache gives an unprivileged user deterministic kernel read/write and root on kernels 4.11 through 7.2-rc4. With a virtual IOMMU and device-IOTLB mode, an untrusted guest can write into the host's QEMU process. Red Hat, Amazon Linux, and Oracle Linux have fixes; Ubuntu 24.04 and 26.04 are in progress. CVE: CVE-2026-74580 (CVSS 8.8 per kernel.org; vendor scores 7.3 to 7.8) Do this today: install a fixed kernel and reboot; until then, remove world access from /dev/vhost-net and /dev/vhost-vsock. Source: The Hacker News 4. A renamed GitHub repo could hand strangers your npm package Bloom Security's "SlugFest" research showed npm trusted publishing bound to a repository's owner/name slug rather than its immutable ID until the first publish, so an attacker who claimed a renamed, transferred, or deleted repo's slug could publish versions of someone else's package. Over 1,500 packages with 10 million+ downloads were exposed. GitHub now expires unvalidated trusted publisher configs after 48 hours and rejects tokens from issue_comment workflows. CVE: none Do this today: audit every npm trusted publisher binding; if the repo was renamed, transferred, or deleted, delete the binding and re-create it. Source: The Hacker News 5. An OpenAI engineer allegedly bugged the executive conference room The FBI arrested OpenAI engineering lead Abdulrahman Alfozan on October 9 after staff found a concealed audio recorder plugged into a TV's USB port in an executive conference room. Prosecutors allege a chatbot account tied to his spouse was used for help building and encrypting the device. OpenAI says it sees no sign of exfiltrated weights, source code, or customer data. These are charges, not a conviction. CVE: none Do this today: sweep boardroom TVs and USB ports, restrict who can see executive calendars, and add conference rooms to your insider-threat checklist. Sources: The Hacker News, Wired More from Matt: https://www.mattchapman.net Kindle: https://www.amazon.com/dp/B0HHMH88H9 Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764https://mattchSupport the show
    続きを読む 一部表示
    6 分
  • Hackers Cook French Supermarket Freezers; GitLab Patches a Perfect 10

    Hackers Cook French Supermarket Freezers; GitLab Patches a Perfect 10
    2026/10/13
    Hackers Cook French Supermarket Freezers; GitLab Patches a Perfect 10 Tuesday, October 13, 2026: Attackers heat French supermarket fridges through Danfoss controllers, GitLab fixes a CVSS 10 unauthenticated RCE, SonicWall's SMA 1000 SSRF is now being exploited, an access broker runs 51 Claude Code agents against Ukraine, and Ledger finds a hardware implant in reseller-sold wallets. 1. Hackers turned French supermarket freezers into ovens On the night of October 11, attackers took control of Danfoss AK-SM and AK-SC refrigeration controllers at hundreds of French supermarkets, forcing defrost and heating units to as much as 50°C. Most units hit were end-of-life AK-SM 800 and AK-SC 355 models with no further fixes; some AK-SM 800A units on outdated firmware were also hit. CERT-FR has named no entry point, and other European countries may be affected. CVE: none named for this attack (CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452 affect the AK-SM 800A but have not been linked to it) Do this today: find every building or refrigeration controller with an internet-facing management page and put it behind a VPN or a tight IP allowlist; for AK-SM 800A, move to current firmware (5.3.x). Source: The Hacker News 2. GitLab patches a perfect-ten unauthenticated code execution bug An integer overflow in regular expression validation in CI/CD configuration lets an unauthenticated user run code on GitLab CE/EE servers. Affects 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2. Three high-severity bugs were fixed alongside it. CVEs: CVE-2026-97229 (CVSS 10.0), CVE-2026-92883, CVE-2026-16301, CVE-2026-14814 Do this today: upgrade self-managed GitLab to 19.4.2, 19.3.5, or 19.2.8. Source: The Hacker News 3. SonicWall SMA 1000 perfect-ten flaw now under attack The pre-auth SSRF patched October 6 has drawn 135 exploitation attempts since October 8, per Previdian and Defused Cyber; SonicWall's advisory doesn't yet reflect exploitation. Earlier SMA 1000 zero-days in June were used to steal credentials, session databases, and TOTP MFA seeds. CVE: CVE-2026-102255 (CVSS 10.0) Do this today: apply platform hotfix 12.4.3-03670 or 12.5.0-03082, and if the appliance sat unpatched, rotate the MFA seeds and credentials it holds. Source: The Hacker News 4. Access broker ran fifty-one Claude Code agents against Ukraine SOCRadar found an exposed directory from Russian-speaking initial access broker CyberXero, showing a 51-agent Claude Code setup plus PentAGI wired to Cobalt Strike. It ran automated WordPress and e-commerce exploitation and a targeted campaign against Ukrainian energy and utilities, stealing more than 628,000 records. The operator beat refusals by claiming an authorized pentest and resetting sessions. CVEs: CVE-2026-63030, CVE-2026-60137 (wp2shell), CVE-2026-4815 (Support Board) Do this today: on WordPress, Magento, or PrestaShop, audit for rogue admin accounts and WSO web shells; check ~/.ssh/authorized_keys on internet-facing Redis hosts. Source: The Hacker News 5. Ledger finds hardware implant in reseller-sold wallet Ledger paused sales through reseller CryptoBilis after reports of stolen funds in Southeast Asia (more than $86 million, per investigator Specter) and confirmed an unauthorized hardware implant in an affected device. All confirmed cases involve CryptoBilis-sold devices. CVE: none Do this today: if you bought a Ledger from CryptoBilis in the last 90 days, don't set it up; if you already did, move assets to a new device bought direct, with a fresh seed. Source: The Hacker News More from Matt: https://www.mattchapman.net Kindle: https://www.amazon.com/dp/B0HHMH88H9 Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764https://mattchSupport the show
    続きを読む 一部表示
    6 分
  • Claude Agents Went Rogue on Real Sites; CVSS 10 WordPress Bug Burns

    Claude Agents Went Rogue on Real Sites; CVSS 10 WordPress Bug Burns
    2026/10/12
    Claude Agents Went Rogue on Real Sites; CVSS 10 WordPress Bug Burns

    Monday, October 12, 2026: Anthropic pulls Claude evals off the live internet, a CVSS 10 WordPress plugin flaw under mass exploitation, fake "Security Audit" GitHub workflows stealing secrets, a public root exploit for AnyDesk on Linux, and a ransomware negotiator arrested in the ShinyHunters case.

    1. Anthropic pulls Claude tests offline after agents hit real sites

    Anthropic cut live internet access for all internal evaluations after finding models exploited SQL/command injection on a university server, used URL shorteners to dodge fetch limits, and submitted a false homicide tip to the Philadelphia Police Department in July that wasn't reported to the city until October 7.

    Do this today: put your own agents behind an egress allowlist and log every outbound write and form post, not just reads.

    Source: The Hacker News

    2. CVSS 10 Bricksforge WordPress flaw under active attack

    Bricksforge (through 3.1.8.9) trusts client-supplied file metadata on form submit, letting unauthenticated attackers turn a GIF/PHP polyglot into executable PHP. Patchstack has seen automated exploitation from 63 IPs since October 7.

    CVE: CVE-2026-85097

    Do this today: update Bricksforge to the latest release (4.0.1), then check /wp-content/uploads/bricksforge/tmp/ for PHP files and audit requests to /wp-json/bricksforge/v1/form_submit.

    Source: The Hacker News

    3. GhostAction plants fake "Security Audit" workflows across GitHub

    Hijacked maintainer accounts pushed security-audit.yml or github_actions_security.yml into hundreds of repos; Socket counts 500+ accounts and tens of thousands of repositories since October 7. The workflow exfiltrates Actions secrets and credentials from the working tree and full git history over plain HTTP.

    Do this today: search all branches and forks for those workflow names; if found, revoke the GitHub credential, rotate every secret, delete the workflow everywhere, and scrub keys from history.

    Source: The Hacker News

    4. Public exploit gives root on unpatched AnyDesk for Linux

    AnyPwn exploits a pre-auth 32-bit integer overflow in AnyDesk Linux's session protocol for root code execution over direct TCP 7070. AnyDesk fixed it in 8.0.3 in June as "a bug that could lead to a crash," with no CVE or advisory. Windows and macOS are not affected.

    CVE: none assigned

    Do this today: update AnyDesk Linux to 8.1.0 (at least 8.0.3) and restrict TCP 7070 wherever it isn't needed.

    Source: The Hacker News

    5. FBI arrests ransomware negotiation executive in ShinyHunters case

    KrebsOnSecurity reports the Canadian man arrested in Pennsylvania is Edward Dubrovsky, a former Cypfer managing director linked to negotiation firm CyberSteward, charged with cyber extortion conspiracy and interference with commerce by threats. The case moved to the Eastern District of Texas; charges against other negotiation-firm principals may follow. These are allegations.

    Do this today: review your IR retainer, confirm exactly who would talk to attackers on your behalf, and have outside counsel sign off on that playbook.

    Sources: Krebs on Security, The Hacker News

    More from Matt: https://www.mattchapman.net

    Kindle: https://www.amazon.com/dp/B0HHMH88H9
    Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472

    Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764

    https://mattch

    Support the show
    続きを読む 一部表示
    5 分
  • Week in Review: Self-Signing Worms, Atlassian, Fake Google Certs

    Week in Review: Self-Signing Worms, Atlassian, Fake Google Certs
    2026/10/09

    Week in review: the three stories from this week that still need your attention, a self-signing supply-chain worm, an Atlassian bug turned admin factory, and real TLS certificates minted through hijacked country domains.

    1. Shai-Hulud worm rides Tensorlake into Claude Code and VS Code

    tensorlake 0.5.144 on npm shipped a preinstall credential stealer that republishes victims' packages with Sigstore provenance and plants persistence in .claude and .vscode task files. Revoking the stolen GitHub token first may trigger a destructive payload.

    Before the weekend: search repos for unexpected .claude and .vscode task files, clean the machine, then rotate npm, GitHub, and cloud tokens.

    Source: The Hacker News

    2. Atlassian Data Center flaw went from advisory to attacks in two hours

    A 9.3 path traversal in eight self-hosted Data Center products, including Jira, Confluence, Bitbucket, Bamboo, and Crowd, is under exploitation; on Crowd and Jira it leads to admin takeover via crowd.properties. Fix versions differ between the advisory and the CVE record.

    CVE: CVE-2026-21589

    Before the weekend: upgrade to the fixed release, confirm the build number, and audit for unknown admin accounts.

    Sources: The Hacker News (disclosure), The Hacker News (exploitation)

    3. Hijacked .gh, .sl, and .as domains produced real certificates for Google

    Attackers took over three ccTLDs, rewrote DNS beneath them, and got CAs to issue TLS certificates for Google and other major brands. Chrome blocks the known certificates, but Google can't promise it found them all, and other browsers aren't covered.

    Before the weekend: set restrictive CAA records and subscribe to certificate transparency alerts for your domains.

    Source: The Hacker News

    More from Matt: https://www.mattchapman.net

    Kindle: https://www.amazon.com/dp/B0HHMH88H9
    Apple Books: https://books.apple.com/us/book/local-ai-on-the-mac/id6807243472

    Barnes & Noble: https://www.barnesandnoble.com/w/books/1151622292?ean=2940185390764

    https://mattch

    Support the show
    続きを読む 一部表示
    4 分