Search: “worm”

2 stories in the last 7d

Acronis urgently patched CVE-2026-87886 (CVSS 7.8), insecure file permissions enabling privilege escalation, exploited in targeted attacks on cPanel & WHM backups.

Acronis released urgent patches for CVE-2026-87886 (CVSS 7.8), insecure file permissions in the Backup plugin for cPanel & WHM and the Backup extension for Plesk that allow attackers to gain elevated privileges. Exploitation has been detected in the wild in limited, targeted attacks against the cPanel & WHM plugin, but not against the Plesk extension. All Linux versions of the plugin before build 1.9.3.1021 and the Plesk extension before build 1.8.11.638 are affected; Acronis urges immediate updates and has not shared technical details.

SecurityWeekupdated Sep 16, 11:08 UTC · 23h agofirst Sep 16, 09:52 UTC · 1d agoExploit / PoC in the wild 6 sources CVE-2026-87886

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack

Attackers hijacked HBO Max's verified Reddit account to push 108 malicious ads delivering AMOS and Amatera infostealers via ClickFix prompts.

Threat actors compromised the official u/hbomax Reddit account and ran 108 malicious ads over 48 hours in a campaign tracked as PasteSwitch, directing users to a fake hbomaxx[.]us site. ClickFix prompts tricked macOS users into running curl | zsh payloads (MacSync, AMOS Helper, fake wallets) and Windows users into executing MSHTA/PowerShell delivering Amatera Stealer. AnimateClipper and ZigClipper clipboard hijackers swapped cryptocurrency addresses using a blockchain-hosted C&C active since early 2026. Reddit suspended the ads after notification.

SecurityWeekupdated Sep 15, 11:51 UTC · 1d agofirst Sep 15, 09:09 UTC · 2d agoMalware in the wild 7 sources

Search: “worm”

Acronis Patches Exploited Vulnerability in cPanel Backup Plugin

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack