US agencies say attackers use AI-written scripts against industrial controllers. Microsoft ties an agentic AI framework to the ConnectWise supply-chain compromise, with privileged cloud access in under three hours. OpenAI expects AI-found critical vulnerabilities to rise sharply. What the primary sources confirm, what is a forecast, and the basics companies and users should act on now.
Browsing Tag
data breach
2 posts
Stolen UpdraftCentral Keys Are Backdooring WordPress Sites. The Fix Has a Gap.
TeamUpdraft’s customer database leaked the UpdraftCentral Cloud keys that sign commands to connected WordPress sites. Attackers used them to install backdoor plugins on fully patched sites. UpdraftPlus 1.26.13 revokes keys created before midday on October 18, but not those from the hours that followed, and it does not remove backdoors that are already in place.