The threat actors behind the black hat redirect malware campaign have scaled up their campaign to use more than 70 bogus domains mimicking URL shorteners and infected over 10,800 websites. “The main objective is still ad...
Drupal this week announced software updates that resolve a total of four vulnerabilities in Drupal core and three plugins, and which could lead to unauthorized access to data. read more
Vendors and agencies are actively bypassing the security patch that Adobe released in February 2022 to address CVE-2022-24086, a critical mail template vulnerability in Adobe Commerce and Magento stores, ecommerce security firm...
Defiant’s Wordfence team warns of a critical-severity vulnerability in the YITH WooCommerce Gift Cards premium WordPress plugin being exploited in attacks. read more
A critical security bug and a months-long, ongoing supply-chain attack spell trouble for WordPress users.
WordPress admins who use any plugins or themes downloaded from AccessPress are being urged to take action after researchers discovered that backdoors were installed in many of the app maker’s products months ago. AccessPress...
Unknown threat actors implanted backdoor code into multiple WordPress themes and plugins after...
WordPress 5.8.3, a security release that became available last week, patches four...
Web administrators overseeing retail sites using the WooCommerce platform should watch for new payment card skimmers that hackers are embedding in checkout pages. The warning comes from security firm RiskIQ, which this week said...
Cyberattackers are targeting security vulnerabilities in four plugins plus Epsilon themes, to assign themselves administrative accounts.
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes. WordPress security...
You’re your own security team, remember? If you run a small online business powered by the Magento ecommerce platform, Britain’s National Cyber Security Centre (NCSC) is begging you to make sure it’s fully...
