cognitive cybersecurity intelligence
An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable.
Every 6.9 and 7.0 site was in range until Friday, when WordPress shipped 6.9.5 and 7.0.2 and enabled what it calls forced updates through its auto-update system.
Adam Kues at Assetnote, Searchlight Cyber’s attack surface management arm, found the flaw and reported
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
ACR Stealer exploits user interaction to steal sensitive data SC Media
New Russian-speaking threat actor UAT-11795 targets US and Europe with novel malware SC Media
MacOS malware hijacks Telegram sessions, targets crypto wallets SC Media
California-based vegetable producer Taylor Farms said on Friday that it will remove products potentially linked to a growing cyclosporiasis outbreak across the country. “Based on
