The wire
Wednesday 21 October 2026
Daily feed
Dated cards. Category tags. Lab notes when they are ready, and a live pull of security and systems news.
11 notes · 36 on the wire
47 stories
Today
- The Hacker NewsSecurity
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Unknown threat actors breached TeamUpdraft's website and potentially gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to backdoor WordPress sites. TeamUpdraft is the developer behind UpdraftPlus, a popular…
thehackernews.com
- The Hacker NewsSecurity
Attackers Hijacked Over 300 Tor Exit Relays to Intercept SSH Connections
Attackers took control of more than 300 Tor exit relays in early October and used them to redirect SSH connections to servers that stole login passwords, a researcher found. Exit relays are the last hop in a Tor circuit, where traffic leaves the network for its destination. Only…
thehackernews.com
- The Hacker NewsSecurity
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors
Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. "The most distinctive technical marker for Bronze Sandcastle is…
thehackernews.com
- The Hacker NewsSecurity
CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including four vulnerabilities impacting Plex Media Server that's collectively called Plex2Shell. The vulnerabilities are…
thehackernews.com
- Hacker NewsWire
Cloudflare deploys protections against php2shell vulnerability
blog.cloudflare.com · 82 pts
- Hacker NewsSecurity
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
safedep.io · 165 pts
- Hacker NewsWire
DuckDB 2.0.0 LTS “Cinnamon Teal”
duckdb.org · 229 pts
- Hacker NewsWire
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
scotthelme.co.uk · 639 pts