Sal Aguilar // WPSecurityAnalyzer.com

I fight #Malware and bad actors at @monarxsecurity & run // I talk about WordPress, Web Security, WAF, CDNs and DevOps.

[ALBERTO PERALTA @ALBERTOPPERALTA]

Genios los hermanos argentinos que hicieron éste doblaje

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

@austinginder Some folks would rather use the unlimited tokens for meme and jokes. Its best to keep a limit to prevent abuse.

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

Glad to read you again @KrasimirSec the bulgarian menace is back 🙌

[Denis @unmaskparasites]

Revealing steganography in malware that fetches payloads from Steam Community comments.
Re: post by @KrasimirSec https://t.co/Qu828epCN0

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

@unmaskparasites Yes but thats one of the variations. They pushed one that returns 503 and also like ndsw injected on a lot of js files

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

🚨 Active #Malware infection campaign targetting #WordPress websites. Injecting JS redirection scripts.

Domains involved:

ushort[.]observer
ushort[.]info
u-short[.]net
urshort[.]live
ushort[.]company
ushort[.]today
u-short[.]net
ushort[.]com
ushort[.]dev

cc @unmaskparasites

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

More info tomorrow!

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

They are also creating fake Coming soon htm, html and php pages that also contain a variation of this redirection.

[Tomzur @tomzur]

The new Bot protection feature is available for your WordPress sites, check your MyKinsta dashboard
🔥🟢🥁

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

#DirtyFrag and 3 @cPanel CVEs - another though week for the web hosting industry. Specially after #CopyFail ast week.

Folks that are actively working on patching production servers to protect companies and customers

THANK YOU❤️💪
https://t.co/YDqXTfCCaL

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

@austinginder @jason_coleman Technically speaking you can use this page https://t.co/b5uDCrhqEK to create a skill.md file - maybe I should have one to offer for download there as well 🤔

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

@austinginder @jason_coleman We live in interesting times. :D

[Austin Ginder @austinginder]

My little scanner website, WP Beacon, is online.
https://t.co/uSpLyXKOZf

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

🚀 Just launched a new version of https://t.co/EG0JT97ruw -- Non-intrusive, read-only surface scan. We hit public endpoints the same way a browser would — no login, no payload, no stress on your origin.

#websecurity #perimetralscan #infosec #WebDevelopment

[7h3h4ckv157 @7h3h4ckv157]

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.mdfile that primes Claude with expert-level methodology for a specific attack surface from SQLi to shellcode, EDR evasion to exploit development.

Resource: https://t.co/0XvEqoqPfv

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

hey @CloudflareAbuse we've just filed an abuse report for a new supply-chain attack on a WordPress plugin. Need your help reviewing case bfb9da91c9d7099b happy to engage further via DM.

[Sam D | Central Florida FSD @SamuelD2022]

Tesla FSD amazed me yet again. It noticed the large trailer so it didn’t pull all the way up to the line after this car went. Then it realized that the trailer was t going to swing wide enough so it REVERSED to make way, then shifted over to get clear. This is AWESOME! #fsd

[Sal Aguilar // WPSecurityAnalyzer.com @riper81]

@austinginder I've realized today that I forgot to say thanks for that awesome research article that you published regarding the compromised plugins. Pure awesome sauce!

[JNS @_devJNS]

POV: You have to start a new chat because Claude doesn't understand anymore and has started hallucinating.😭

[Tomzur @tomzur]

🟢WordPress job opening

Our Sales team is looking for a Business Development Representative (BDR) in the AMERS region

Fully remote position!

Annual remote expense budget
Flexible PTO
Sabbatical
Location-specific healthcare benefits

Come and join our team!
https://t.co/kfSEbO6tiS