#бэкдор
-
Official Claude Code Extension on Cursor's Marketplace Swapped for a Version with an SSH Backdoor
A modified Claude Code extension spread through Cursor's extension marketplace. It added an attacker's key to authorized_keys and installed persistence. Cursor estimates that at most 5,000 users were affected.
-
Stolen UpdraftCentral keys used to backdoor WordPress sites
Attackers breached TeamUpdraft and appear to have stolen UpdraftCentral keys that can issue commands to connected sites. Roughly 400,000 WordPress websites may be exposed.
-
Hack of Admin Menu Editor Pro Developer Turned Updates Into a Backdoor on 1,500 WordPress Sites
The attacker gained access to the site of the developer behind a popular plugin and distributed malicious updates that create a hidden administrator account. At least 230 customers were affected.
-
Slovakia Finds Russian Backdoor in Roadside Speed Cameras
Slovakia's National Security Authority has warned about the dangers of NERO R-ONE cameras: the devices grant access to their shell via SMS sent from Russian numbers hardcoded into the firmware.
-
Head Mare Breached TrueConf Servers and Swapped Client Installers for Backdoored Ones
The hacktivist group Head Mare is exploiting vulnerabilities in unpatched TrueConf video-communication servers to push users trojanized clients carrying the PhantomCore and PhantomGraph backdoors.
-
Rosenbridge: a Hardware Backdoor in Some x86 Processors
Security researcher Christopher Domas has discovered a hidden, undocumented core in VIA C3 processors that lets user-space code access the operating system's kernel memory, bypassing every hardware protection.
-
Zbtlink Routers Ship with a Factory Backdoor That Opens Passwordless Root Access
Researchers at VulnCheck have found a built-in backdoor in every firmware image from Chinese manufacturer Zbtlink: it hands an attacker an interactive root shell without any authentication whatsoever.
-
The AnySign4PC Attack: Infecting South Koreans Without a Single Click
South Korean authorities and four cybersecurity firms have uncovered an espionage campaign: compromised legitimate websites exploited a vulnerability in local electronic-signature software to silently install the SIGNBT and COPPERHEDGE backdoors.
-
Laundry Bear Hackers Exploit Outlook Web Access Zero-Day for Stealthy Mailbox Access
A Russian pro-government group is exploiting an XSS vulnerability in the web version of Outlook to deliver the OWAReaper backdoor, which keeps its foothold in a mailbox even after a password change and a full system reinstall.
-
Unsecured Hacker Server Exposes Mass WordPress Site Compromise Campaign
Researchers gained access to a cybercriminal group's server that sat open on the internet for three weeks, getting an inside look at how a mass WordPress site compromise operation is run.
-
Hidden Backdoor Found in Tenda Router Firmware
Researchers have discovered a hidden authentication loophole in the firmware of several Tenda router models that allows administrative access to the device's web management panel.