Hacked WordPress sites use visitors' browsers to hack other sites

Published on March 6, 2024

Hackers are conducting widescale attacks on WordPress sites to inject scripts that force visitors' browsers to bruteforce passwords for other sites.  [...]

Continue reading on website
Other news

Hackers impersonate U.S. government agencies in BEC attacks

March 6, 2024
A gang of hackers specialized in business email compromise (BEC) attacks and tracked as TA4903 has been impersonating various U.S. government entities to lure targets into opening malicious files carrying links to fake bidding processes. [...]

TeamCity auth bypass bug exploited to mass-generate admin accounts

March 7, 2024
Hackers have started to exploit the critical-severity authentication bypass vulnerability (CVE-2024-27198) in TeamCity On-Premises, which JetBrains addressed in an update on Monday. [...]