Episode 109: This Attack Will Make You Want to Stop Using SMS 2FA
An attack shows how a SMS enablement service was used to bypass SMS 2FA for $16. We discuss the recently patched vulnerabilities in Elementor affecting over 7 million WordPress sites…
Episode 108: Hack Exposes 150,000 Security Cameras at Tesla, Cloudflare and Others
A data breach exposes 150,000 security cameras used by organizations around the world, including Tesla and Cloudflare. State-sponsored hacking groups exploit Microsoft Exchange vulnerabilities. A fire in a French data…
Episode 107: Two Plugin Vulnerabilities Target File Upload Capabilities
The Wordfence Threat intelligence team finds vulnerabilities in two plugins, the User Profile Picture plugin and the WooCommerce Upload Files plugin. WordPress 5.7 is set to release on Tuesday, March…
Episode 106: Admin Password Resets, Blockchain Botnets and a Central Management RCE
WordPress 5.7 is due to be released on March 9, and it will allow administrators to send password reset emails to users. A botnet is abusing the Bitcoin blockchain for…