2+ week, 6+ day ago   (534+ words) Hackers are actively exploiting a pair of severe security flaws in a widely used WordPress single sign-on plugin, and thousands of sites that rely on paid versions may not even know they are exposed. Researchers say the bugs allow attackers…...

3+ week, 3+ day ago   (323+ words) Investigators say the intrusion did not exploit a flaw in Rust itself. Instead, attackers appear to have obtained the login credentials of arrayref’s legitimate maintainer, or gained direct access to that person’s machine. With that access, they published altered versions…...