cognitive cybersecurity intelligence

News and Analysis

Search

WordPress attackers hide malware in overlooked plugins directory

Hackers are using WordPress’s Must-Use plugins (mu-plugins) to inject malware on websites, warns cybersecurity firm Sucuri. The issue will not be spotted in routine security checks, most of which overlook mu-plugins. Sucuri discovered attackers used the directory to prevent detection and auto-load their own files. The firm advised site admins to include mu-plugins in security scans, keep software updated and use strong passwords.

Source: www.scworld.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts