News
ai Making the internet better for AI agents might make it worse for everyone else - MIT Technology Review cybersecurity Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks - SecurityWeek ai “We were looking at it wrong”: The explosive claim that’s upended the AI world - MIT Technology Review cybersecurity Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor - The Hacker News cybersecurity OpenCode hack exposes API keys amid AI distillation attacks - BleepingComputer cybersecurity Weekly Cybersecurity Newsletter — Top 50 Cybersecurity Stories of the Week - CyberPress threat-intel Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding - GBHackers cybersecurity Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor - The Hacker News cybersecurity WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot - Wired Security vulnerability Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED) - Rapid7 Vulnerability Disclosure cybersecurity Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw - SecurityWeek cybersecurity Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack - SecurityWeek threat-intel Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779 - Rapid7 Emergent Threat Response threat-intel Supply Chain Zero Days: Closing the Gap Between Publication and Detection - Wiz Research threat-intel CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild - Rapid7 Emergent Threat Response
1 / 15
All news ›
Cybersecurity

Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.