Category: Security

CISA has listed four WordPress core flaws as exploited since July, and WordPress's own advisories rate only the latest one low.

An attacker used cPGuard's update channel on November 2 to install a backdoor and collect password hashes on servers where the script ran.

DreamHost confirms an attacker exploited its File Manager and reached FTP/SFTP and some webmail credentials, affecting well under 10% of those accounts.

Wordfence detected probing of the update-window flaw fixed in WordPress 7.1.4 within hours and counted more than 18,500 requests in 21 hours.

A Linux kernel TCP flaw has a root exploit from Anthropic's lab. Red Hat, Debian and AlmaLinux 8 ship fixed kernels, while Ubuntu has none yet.

WordPress 7.1.4 fixes 22 vulnerabilities, one of them a race condition in core updates that could lead to remote code execution.

A LiteSpeed Cache flaw fixed in 7.9.1 can expose admin-level REST data on some sites for a week, and clearing it takes a manual purge.

Japanese host GMO refused a ransom after its Desktop Cloud VPS platform was breached, kept it offline and opened a $1 million bounty.

A timeline of how hosts, panels and distributions handled PHP2Shell, from the October 20 leak to CISA's October 26 KEV listing.

DreamHost's File Manager was offline from October 23 to 26, and affected account owners are asked to reset every email and FTP/SFTP password.