UpdraftPlus / UpdraftCentral Remote Management Key Compromise – Backdoor Deployment 4M+ CVSS 9.8 An attacker holding valid UpdraftCentral dashboard keys is installing backdoor plugins on connected WordPress sites. The campaign ran continuously through an 18-hour window on 18-19 October. Patchstack blocks UpdraftCentral remote commands and has... Weiterlesen: Stolen UpdraftCentral Keys Are Backdooring WordPress Sites
Intelligence View
⚡ tsecurity.de Intelligence
Stolen UpdraftCentral Keys Are Backdooring WordPress Sites
UpdraftPlus / UpdraftCentral Remote Management Key Compromise – Backdoor Deployment 4M+ CVSS 9.8 An attacker holding valid UpdraftCentral dashboard keys is i…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
13 Bronnen
AI Makes Linux 7.4 Merge Window the Largest in Kernel History
12 andere bronnen
SSlashdot1 uur geledenAI Makes Linux 7.4 Merge Window the Largest in Kernel History VVulDB Updates4 uur geledenCVE-2026-72383 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 sctp sctp_free_addr_wq use after free VVulDB Updates4 uur geledenCVE-2026-72375 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 afs lib/debugobjects.c afs_lock_work race condition VVulDB Updates4 uur geledenCVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference VVulDB Updates4 uur geledenCVE-2026-72320 | Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2 nft_lookup nft_lookup_eval privileges management VVulDB Updates4 uur geledenCVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue
+6
11 Bronnen
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
10 andere bronnen
VVulDB Updates6 uur geledenCVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updates6 uur geledenCVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updates6 uur geledenCVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updates6 uur geledenCVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761) VVulDB Updates6 uur geledenCVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761) VVulDB Updates6 uur geledenCVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+4
9 Bronnen
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 andere bronnen
VVulDB Updates1 uur geledenCVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VVulDB Updates1 uur geledenCVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VVulDB Updates1 uur geledenCVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VVulDB Updates1 uur geledenCVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VVulDB Updates1 uur geledenCVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VVulDB Updates1 uur geledenCVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4281415/beveiligingslekken-cve/stolen-updraftcentral-keys-are-backdooring-wordpress-sites/