A BdThemes supply chain attack poisoned a plugin API feed to run silent XSS in admin browsers, creating rogue admins across WordPress sites. Related Posts: Fake AI Tools Malware Targets Developers Through GitHub DOUBLECUP: New ClickFix Loader Drops CountLoader and DeviceManager RAT Interlock Ransomware Abuses Volatility3 for Credential Theft The post BdThemes Supply Chain Attack Poisons Plugin API to Hijack WordPress Admins appeared first on Daily CyberSecurity.