A swapped monitoring script on Polymarket emptied hundreds of trader accounts in under an hour. Here is how it worked and what any business running outside code should check.
Tag:
supply chain attack
-
-
Rank Math PRO 3.0.123 shipped with a self-rebuilding backdoor for about eleven hours. Here is who is affected and how to clean up.
-
Attackers briefly swapped files on AOMEI’s update servers so that Backupper installs downloaded a backdoor. Here is what Google and ManageEngine found.
-
An attacker used a credential for ConnectWise’s Cloud Backup app to sign in to Microsoft 365 tenants one by one. Here is what happened and the checks to run this …
-
Three ShapedPlugin Pro plugins served malware via official updates for three weeks. Updating the plugin is not enough — here is what site owners need to do.
-
A CDN-level supply chain attack backdoored over 1.2 million WordPress sites via OptinMonster, TrustPulse and PushEngage. Here is exactly what to check and how to clean up.