Weekly Cyber Security News 27/06/2024

Let’s catch up on the more interesting vulnerability disclosures and cyber security news gathered from articles across the web this week. This is what we have been reading about on our coffee break!

WordPress is often an easy target from lack coding, but in this case a curious injection at source. But how?

• Plugins on WordPress.org backdoored in supply chain attack

Ah… When a service dies and domain name is up for grabs it doesn’t take much for someone to grab it and do something unexpected…

• Polyfill.io JavaScript supply chain attack impacts over 100K sites

Using it’s own features… That’s novel:

• Snowblind malware abuses Android security feature to bypass security