80K Retail WooCommerce Sites Exposed by Plugin XSS Bug
The Variation Swatches plugin security flaw lets attackers with low-level permissions tweak important settings on e-commerce sites to inject malicious scripts.
Source:
[...]
sites
Linux Malware Agent Attack eCommerce Sites & Stealing Payment Data
Researchers have found a new, malicious Linux agent that hides as a system process on e-commerce servers. This new malicious Linux agent name
[...]
Fake Ransomware Infection Hits WordPress Sites
WordPress sites have been splashed with ransomware warnings that are as real as dime-store cobwebs made out of spun polyester.
Source: Threat
[...]
WordPress Plugin Bug Lets Subscribers Wipe Sites
The flaw, found in the Hashthemes Demo Importer plugin, allows any authenticated user to exsanguinate a vulnerable site, deleting nearly all database content
[...]
CISA Urges Sites to Patch Critical RCE in Discourse
The patch, urgently rushed out on Friday, is an emergency fix for the widely deployed platform, whose No. 1 most trafficked site is
[...]
JavaScript Packing Found In More Than 25% of Malicious Sites
Obfuscation techniques are extremely prevalent, data shows, but they can’t be used as a single indicator of compromise because legitimate websites use them.
[...]
Cloudflare Isn't Liable for Sites That Hawk Counterfeits
A federal judge ruled that the content-delivery service doesn’t “contribute” to copyright infringement.
Source: Wired – Cloudflare Isn’t Liable for Sites That
[...]
Porn Problem: Adult Ads Persist on US Gov’t, Military Sites
Cities, states, federal and military agencies should patch the Laserfiche CMS post-haste, said the security researcher whose jaw dropped at 50 sites hosting
[...]
WordPress Sites Abused in Aggah Spear-Phishing Campaign
The Pakistan-linked threat group’s campaign uses compromised WordPress sites to deliver the Warzone RAT to manufacturing companies in Taiwan and South Korea.
[...]
Porn Showed Upon on Legit News Sites Thanks to Internet Rot
Plus: China’s pipeline probing, a Chromebook debacle, and more of the week’s top security news.
Source: Wired – Porn Showed Upon on
[...]