Weekly Cyber Security News 20/07/2023

A selection of this week’s more interesting vulnerability disclosures and cyber security news.

A basic a security failure. Pretty damaging to them as well as their users…

• WordPress AIOS plugin used by 1M sites logged plaintext passwords

Sadly not a surprising revelation:

• Thousands of images on Docker Hub leak auth secrets, private keys

This is new. A bit desperate but surely if someone asks you to wrap cash in magazines and send it through the post, even a legitimate sounding company, I hope this would raise questions. Right? No apparently? OK….

• Tech support scammers go analog, ask victims to mail bundles of cash