Malicious code in business-account-web-app (npm)

The package business-account-web-app was found to contain malicious code...

MAL-2025-16362 Malicious code in business-account-web-app (npm)

The package business-account-web-app was found to contain malicious code...

Yelp: Privilege Escalation - A Low Privilege User who does not have access to the user management module can remove the owner of the business account

The owner of the business account was removed by a low-privilege user who did not have access to the user management module...

Automattic: Remote Code Execution in Wordpress Desktop

An attacker can create a malicious page that when viewed or edited in Wordpress Desktop App will results in remote code execution. This issue looks to be around this line of code: https://github.com/Automattic/wp-desktop/blob/develop/desktop/window-handlers/external-links/index.jsL38 If...

Malwarians at the Gate: Banks, Business Customers and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud? You left your car unlocked. When you return, it was vandalized...