Filtered by category: Infosecurity Magazine, tag: cybersecurity × Clear
WordPress Plugins Compromised Without a Single File Change
Matched: WordPress
Attackers backdoored WordPress sites by injecting malicious code into a third-party JSON feed consumed by plugins, rather than modifying plugin files directly. Because no plugin files were altered, standard file-integrity checks failed to detect the compromise. The attack highlights the risk of plugins that pull external data, as that data can serve as an infection vector bypassing conventional security monitoring.
Researchers Build WordPress Exploit Using OpenAI's GPT
Matched: WordPress
Researchers used OpenAI's GPT model to develop an exploit chain targeting a critical WordPress vulnerability. The work demonstrates AI's growing capability to assist in cybersecurity research, raising concerns about how the same tools could lower the barrier for malicious actors to develop working exploits from known vulnerabilities.