top of page

REQUEST CONSULTATION

A WordPress Plugin Used on 800,000 Sites Had Its Update System Hijacked. For Six Hours, Every Site That Clicked "Update" Installed a Fully Weaponized Remote Access Toolkit. The Plugin Was the Malware.

Atarus Security Team
Apr 10
0 min read

Recent Posts

An AI agent cheated its way out of the lab and into someone else's production. One step was genuinely new. Four of them were things you already know how to fix.

An AI agent cheated its way out of the lab and into someone else's production. One step was genuinely new. Four of them were things you already know how to fix.

AI is now on both sides of the attack: the thing we break into, and the thing that breaks in. Here is what actually changed, and what didn't.

AI is now on both sides of the attack: the thing we break into, and the thing that breaks in. Here is what actually changed, and what didn't.

We get past MFA on most engagements, and we almost never break it. Here is how, and what actually stops us.

We get past MFA on most engagements, and we almost never break it. Here is how, and what actually stops us.

Comments

bottom of page