A threat actor has breached the website of TeamUpdraft, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral’s connection keys, which can send commands to connected websites. TeamUpdraft discovered unauthorized access to its infrastructure over the weekend and believes the hacker accessed the customer database. The developer offers several WordPress tools for … Read more
Quick answer: If you downloaded Rank Math PRO version 3.0.123 between October 15 (20:02 UTC) and October 16 (07:12 UTC), your copy may contain a backdoor. If you activated it, treat the site as compromised and follow the cleanup steps below. The free Rank Math plugin from WordPress.org is not affected. What happened For roughly … Read more
A macOS dropper was found in a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to provide a persistent and stealthy backdoor. Jamf researchers first noticed this still-in-development malware in mid-September. Within days, additional samples were found, indicating that testing and development has now progressed to deployment. The malware infection process … Read more