Over 5,000 WordPress websites globally have been breached in a new attack campaign that creates fake admin accounts and injects malicious plugins to steal data. It is unclear how the websites were initially compromised. A security report has prompted web admins to use firewalls and other systems, scrutinize privileged accounts and plugins, and strengthen cross-site request forgery defenses. The use of multi-factor authentication was also recommended.

After Mythos: New Playbooks For a Zero-Window Era
When patching isn’t fast enough, NDR helps contain the next era of threats. If you’ve been tracking advancements in AI, you know the exploit window,


