Visit the Wrong Site While Logged In to WordPress, Get a Backdoor
Securonix found JavaScript on hijacked sites that uses a logged-in WordPress admin's session to install a backdoored plugin that persists in mu-plugins and hides from the plugin list.
The Roundup
Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.
1 story matches your filters.