Sal Aguilar // WPSecurityAnalyzer.com

🚀 Just launched a new version of wpsecurityanalyzer.com -- Non-intrusive, read-only surface scan. We hit public endpoints the same way a browser would — no login, no payload, no stress on your origin. #websecurity #perimetralscan #infosec #WebDevelopment

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.mdfile that primes Claude with expert-level methodology for a specific attack surface from SQLi to shellcode, EDR evasion to exploit development. Resource: github.com/SnailSploit/Cl…

hey @CloudflareAbuse we've just filed an abuse report for a new supply-chain attack on a WordPress plugin. Need your help reviewing case bfb9da91c9d7099b happy to engage further via DM.

Tesla FSD amazed me yet again. It noticed the large trailer so it didn’t pull all the way up to the line after this car went. Then it realized that the trailer was t going to swing wide enough so it REVERSED to make way, then shifted over to get clear. This is AWESOME! #fsd

@austinginder I've realized today that I forgot to say thanks for that awesome research article that you published regarding the compromised plugins. Pure awesome sauce!

POV: You have to start a new chat because Claude doesn't understand anymore and has started hallucinating.😭

🟢WordPress job opening Our Sales team is looking for a Business Development Representative (BDR) in the AMERS region Fully remote position! Annual remote expense budget Flexible PTO Sabbatical Location-specific healthcare benefits Come and join our team! jobs.lever.co/kinsta/d45eebf…

A web skimmer campaign using numbers 0 through 9 in their domain names. The same campaign previously used wpengine-cdn[.]com and cms-manager[.]net

@alexio44 Remember SuSe

Weekend.... And now?

Tesla self-driving saves a lot of lives – the statistics are unequivocal. That doesn’t mean it’s perfect, of course. Even when we improve safety 10X, saving 90% of the million lives lost in auto accidents every year, Tesla will still get sued for the 10% who did die. The 90% who are still alive mostly won’t even know that Tesla saved them. Nonetheless, it is the right thing to do.

My analysis on the Android version of The White House app: thereallo.dev/blog/decompili…

updatecore.php --> f55cf210763db09b1b26574489c1b168ece10d3a630c09dba4ffe50b883ae673 wp-file-checker.php --> 9769346db60d15e28d0a623c9314c355005e5eabf9eddda9c4a0486c48de13b8 wp-cleanup-tool.php --> 78def7faa33f6a4fa23b44f97805908f5d07e1841c84fb73600bc855317c1b6a

If you have console access to your server/website/container run this command to find the files: find . -type f -exec sha256sum {} + | grep "1446f83e43aeba266439470cab55dbdfdfe6e7348e0826e35a531bf6c73b8b62" This for the zip file containing the fake plugin.

New #WordPress fake plugin actively being installed: updatecore Files: ./updatecore/updatecore.php ./updatecore/wp-file-checker.php ./updatecore/wp-cleanup-tool.php Pushed via compromised Administrators.

Anyone looking for fully remote jobs, here is your chance

Most of the files uploaded are cPanel exploits and CASINO related SEO SPAM pages. #wordpresssecurity #websecurity #wordpress #infosec #monarx #malware #vulnerabilities #hosting

at @monarxsecurity we've also observed the following IPs trying to exploit this vulnerability: 141.98.214[.]25 141.98.214[.]250 162.158.111[.]72 164.92.83[.]110 167.88.61[.]211 45.77.36[.]84 49.156.40[.]126 92.118.138[.]24 93.185.162[.]149

Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access thehackernews.com/2026/01/critic… via @TheHackersNews