Search results for RCE
AI & Enterprise
Attack attempts targeting WordPress update remote code execution flaw top 60,000 a day
Attack attempts targeting a WordPress core remote code execution (RCE) vulnerability exceeded 60,000 in 24 hours, Cybersecurity News reported on Oct. 31. Security firm Wordfence blocked 60,471 attempts during that period, the report said, adding that the figure does not represent confirmed site compromises. WordPress released version 7.1.4 on Oct. 28 to fix 22 vulnerabilities. Users of older versions were urged to update.
AI & Enterprise
Enky Whitehat releases free scanner to detect PHP2Shell PHP vulnerability
Enky Whitehat has released a vulnerability diagnostic scanner to check for the presence of PHP2Shell, a high-risk PHP core remote code execution flaw, the company said on Thursday. The tool identifies PHP versions and related configuration settings without using actual attack code to make an initial assessment of asset risk. The company also published an analysis report covering technical details, affected systems and versions, mitigation steps and patch guidance.
AI & Enterprise
Tech Insight: AI hackers target logic flaws, not code bugs
Kevin Mandia (케빈 맨디아), the founder of Mandiant and CEO of AI security startup Armadin, said AI-driven attacks target logic gaps in business workflows rather than code flaws. He said AI attackers try every possible path in applications. Armadin provides automated security agents and raised $189.9 million in seed and Series A funding led by Accel. Mandia said Armadin found more than 90 zero-day vulnerabilities at Fortune 500 clients since January.