{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Wordfence Security News","title":"WordPress Backdoors, NetScaler Bleed & AI Ransomware | Wordfence Security News #15","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/6c9c887d\"></iframe>","width":"100%","height":180,"duration":822,"description":"WordPress Backdoors, NetScaler Bleed & AI Ransomware | Wordfence Security News #15\n\nThis week in Wordfence Security News (Week of July 13, 2026):\nExposed hacker server reveals mass WordPress backdooring op chaining 27 known flaws; over 25,000 sites with confirmed or validated compromise\nCritical Adobe ColdFusion path traversal patched June 30 saw exploitation attempts within hours of technical details going public\nSharePoint Server on-prem RCE Microsoft rated exploitation less likely added to CISA's exploited catalog July 1\nNew NetScaler pre-auth memory overread leaks process memory on SAML IdP configs, echoing CitrixBleed\nRoguePlanet, a fourth Defender flaw from the BlueHammer researcher, escalates a local attacker to system\nSysdig assesses the first documented agentic ransomware case: an AI agent encrypted 1,342 config items via a Langflow flaw\nSymlink trick in a booby-trapped GitHub repo fools six AI coding assistants into writing an attacker SSH key\nTimestamps:\n\n0:00 Introduction\n0:52 WP-SHELLSTORM: Open Server Exposes Mass WordPress Backdooring Operation\n4:39 Adobe ColdFusion Flaw Exploited After Details Go Public\n6:08 SharePoint Flaw Microsoft Called Unlikely Is Now on CISA's List\n7:21 New NetScaler Flaw Echoes CitrixBleed\n8:19 Microsoft Patches RoguePlanet, Fourth Defender Flaw from Same Researcher\n9:14 Researchers Describe Possible First AI-Run Ransomware Attack\n11:27 Symlink Trick Fools Six AI Coding Assistants\n\nStory Links:\nWP-SHELLSTORM: Open Server Exposes Mass WordPress Backdooring Operation\nAdobe ColdFusion Flaw Exploited After Details Go Public\nSharePoint Flaw Microsoft Called Unlikely Is Now on CISA's List\nNew NetScaler Flaw Echoes CitrixBleed\nMicrosoft Patches RoguePlanet, Fourth Defender Flaw from Same Researcher\nResearchers Describe Possible First AI-Run Ransomware Attack\nSymlink Trick Fools Six AI Coding Assistants\n\nStay informed and secure: get the latest Wordfence Security News on the Wordfence blog or subscribe to the WordPress Security...","thumbnail_url":"https://img.transistorcdn.com/tNZ1BCLBa7hdisGHRggcQKe1fS0BRjNwLU5euMPMXfE/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8yNjZm/M2NiNzczNWQ4MDdh/OTYyMTg5MDQ5ODk3/ODI5ZC5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}