Share story
Security

Trojanized WordPress plugin update reaches at least 1,500 sites

Trojanized WordPress plugin update reaches at least 1,500 sites Image: Primary
Malicious updates for the premium Admin Menu Editor Pro WordPress plugin were installed on at least 1,500 sites, according to the plugin's developer. The compromised versions 2.35 and 2.36 created a hidden user account and included code that installed a web shell. The developer took the distribution site offline after determining the attacker may have had root-level server access. The free version was not reported affected.
Sources
BleepingComputer
Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Infrastructure Security
Infrastructure Security

Firezone releases Rust WireGuard library supporting parallel encryption

Firezone has released sanstun, an Apache 2.0-licensed Rust implementation of WireGuard available on crates.io. The library separates network operations, time and randomness from protocol state, giving applications control over those operations.

firezone.dev
Security
Security

Northflank urges all users to rotate secrets during security incident

Northflank told all users to assume their environment variables had been decrypted and rotate keys immediately during an October 30 security incident. Its status page said multiple users were confirming unauthorized use of their AI keys.

status.northflank.com