WordPress has patched Click2Shell, that could allow an attacker to silently install a theme and execute PHP code on the targeted website.

Attackers impersonate LastPass and other brands to drop a kernel driver, disable security tools, and deploy the Rapuncel stealer.

The utility installed six Tesla Megapack batteries in late August. The full system will have 54 units providing 160 ...

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

ClickFix lures deliver the ChainScript RAT, which uses a Polygon smart contract to locate active WebSocket ...

A newly disclosed WordPress Core vulnerability chain, dubbed Click2Shell, allowed unauthenticated attackers to force a logged ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...