Tech News
Exposed UpdraftCentral Keys Enable Malicious Plugin Installation on WordPress
Attackers used stolen connection keys from a TeamUpdraft breach to push malicious code to WordPress sites, bypassing signature checks.
WordPress
Everything TechSec Headlines has reported about WordPress: 3 stories, newest first. Part of our AI coverage.
Tech News
Vulnerabilities
LatePoint timing flaw in WordPress plugin enables credential-less account theft via OTP race condition
A timing flaw in the LatePoint WordPress plugin allows attackers to bypass login limits and steal customer accounts without credentials.
AI
Claude Code: CyberXero AI Campaign Steals 628k Records via WordPress Breaches
SOCRadar researchers linked a Russian-speaking broker to a dual campaign using Claude Code to breach WordPress sites and Ukrainian energy infrastructure, resulting in massive data theft.