WordPress administrators often keep their dashboard open in the same browser they use for everyday browsing. A new attack chain shows why that habit is risky. Researchers have documented a JavaScript loader that waits for a signed-in administrator to visit a compromised page, then uses that browser’s trusted session to install a hidden PHP backdoor […]
This article has been indexed from Cyber Security News
Read the original article:
Hackers Can Abuse Logged-In WordPress Admin Sessions to Secretly Install PHP Backdoors