Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
Tag: CVE-2021-29441
AI Agent JADEPUFFER Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig has identified what it believes is the first ransomware attack fully orchestrated by an AI agent, dubbed JADEPUFFER. The…
CVE-2021-29441: Nacos Authentication Bypass
An old vulnerability in Nacos configuration server allowing authentication bypass by faking a web header. Used by WP-SHELLSTORM in an earlier campaign…