URL has been copied successfully!
Hackers target WordPress sites in miniOrange auth bypass attacks
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Hackers target WordPress sites in miniOrange auth bypass attacks


Tags: , , , , ,

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators.

First seen on bleepingcomputer.com

Jump to article: www.bleepingcomputer.com/news/security/hackers-target-wordpress-sites-in-miniorange-auth-bypass-attacks/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Password managers under increasing threat as infostealers triple and adapt
  2. Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint Attacks, as U.K. Boosts Cyber Assessment Framework
  3. Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
  4. Hackers exploit Modular DS WordPress plugin flaw for admin access