Suche
Beiträge, die mit plugin getaggt sind
And now I also did an #interview with the young Dutch developer on my #blog, see: https://amadeuspaulussen.com/blog/2025/interview-roel-vugts-rv-audio-design
Interview with Roel Vugts from RV Audio Design | Amadeus Paulussen
Raw vegan, music producer, open source enthusiast and expert in digital arts. Unity consciousness explorer with a focus on creating abundance and fulfillment for everyone and everything.Amadeus Paulussen
https://schallundstille.de/2025/04/04/fixing-foveon-dngs-in-darktable/
#sigma #foveon #darktable #plugin #lua #photography
https://github.com/flokosiol/kirby-viewmode
GitHub - flokosiol/kirby-viewmode
Contribute to flokosiol/kirby-viewmode development by creating an account on GitHub.GitHub
Webscript security company c/side discovered during an incident response engagement for one of their clients that the malicious activity uses the wp3[.]xyz domain to exfiltrate data but have yet to determine the initial infection vector.
https://cside.dev/blog/over-5k-wordpress-sites-caught-in-wp3xyz-malware-attack
#wordpress #malicious #plugin #it #security #privacy #engineer #media #tech #news
![[ImageSource: c/side]
After compromising a target, a malicious script loaded from the wp3[.]xyz domain creates the rogue admin account wpx_admin with credentials available in the code. The script then proceeds to install a malicious plugin (plugin.php) downloaded from the same domain, and activates it on the compromised website.
[⚠️Blocking the Attacks⚠️]
c/side recommends that website owners block the ‘wp3[.]xyz’ domain using firewalls and security tools. Moreover, admins should review other privileged accounts and the list of installed plugins, to identify unauthorized activity and remove them as soon as possible.
Finally, it is recommended that CSRF protections on WordPress sites be strengthened via unique token generation, server-side validation and periodic regeneration. Tokens should have a short expiration time to limit their validity period.
Implementing multi-factor authentication also adds protection to accounts with credentials that have already been compromised.](https://nerdculture.de/system/media_attachments/files/113/883/249/146/798/681/original/62e28c105c3812a5.png "[ImageSource: c/side]
After compromising a target, a malicious script loaded from the wp3[.]xyz domain creates the rogue admin account wpx_admin with credentials available in the code. The script then proceeds to install a malicious plugin (plugin.php) downloaded from the same domain, and activates it on the compromised website.
[⚠️Blocking the Attacks⚠️]
c/side recommends that website owners block the ‘wp3[.]xyz’ domain using firewalls and security tools. Moreover, admins should review other privileged accounts and the list of installed plugins, to identify unauthorized activity and remove them as soon as possible.
Finally, it is recommended that CSRF protections on WordPress sites be strengthened via unique token generation, server-side validation and periodic regeneration. Tokens should have a short expiration time to limit their validity period.
Implementing multi-factor authentication also adds protection to accounts with credentials that have already been compromised.")
Over 5,000 WordPress sites caught in WP3[.]XYZ malware attack
We’ve uncovered a widespread malware campaign targeting WordPress websites, affecting over 5,000 sites globally. The malicious domain: "https://wp3.xyz/plugin[.]php".c/side