It’s Worse Than We Thought: AI Has Taken the Clock Off Cyberattacks. What Companies and Users Should Do Now

A large turquoise ocean wave rising far out at sea behind a small white coastal plant with two round tanks, under a clear blue sky
US agencies say attackers use AI-written scripts against industrial controllers. Microsoft ties an agentic AI framework to the ConnectWise supply-chain compromise, with privileged cloud access in under three hours. OpenAI expects AI-found critical vulnerabilities to rise sharply. What the primary sources confirm, what is a forecast, and the basics companies and users should act on now.
View Post

Stolen UpdraftCentral Keys Are Backdooring WordPress Sites. The Fix Has a Gap.

A translucent glass master key floating in a blue sky above small white houses, with one thin orange thread of light reaching down to the ground
TeamUpdraft’s customer database leaked the UpdraftCentral Cloud keys that sign commands to connected WordPress sites. Attackers used them to install backdoor plugins on fully patched sites. UpdraftPlus 1.26.13 revokes keys created before midday on October 18, but not those from the hours that followed, and it does not remove backdoors that are already in place.
View Post