The Hacker News reports that attackers are actively exploiting a critical Bricksforge WordPress flaw that can let unauthenticated attackers upload and execute arbitrary PHP code on vulnerable sites. The plugin versions up to and including 3.1.8.9 are affected, and users are advised to update to the latest version and check for unexpected PHP files and repeated submissions to the plugin’s form endpoint.
Source: thehackernews.com
…
The FBI has arrested another suspected co-conspirator of ShinyHunters after the group said it breached the FBI’s jobs portal and stole sensitive data on almost all FBI agents and job applicants, The Hacker News reports. The FBI said the breach happened after a contractor failed to implement a security patch for the platform. The agency has removed the contractor.
Source: thehackernews.com
The Hacker News reports that attackers have compromised open-source maintainer accounts to push a malicious GitHub Actions workflow into more than 340 repositories, with more than 500 GitHub accounts affected since October 7. The workflow is designed to steal secrets, including cloud, SaaS and AI credentials. Developers should check for the named workflows, revoke compromised GitHub credentials, rotate secrets, and delete the malicious workflow from all branches.
Source: thehackernews.com
SecurityWeek reports that Bitdefender found Midnight Mimosa, a campaign that ships malware preinstalled in the firmware of low-cost Android devices built on MediaTek platforms. The malware can silently install and remove apps, grant permissions, and load code remotely, and some related apps were also found on Google Play. Windows users should be cautious with cheap devices and avoid installing apps from untrusted sources.
Source: securityweek.com
