John Z Black

Your WordPress Plugin Auto-Updated. Now You Have Six Backdoors.

John Z Black Apr 12, 2026

Vulnerabilities & Patching #wordpress #smart-slider #supply-chain #backdoor #joomla #patchstack #web-security

Attackers hijacked the Smart Slider 3 Pro update server and pushed a six-layer backdoor to 900,000 sites. The must-use plugin it installed doesn't show up in your WordPress dashboard. Deleting the plugin doesn't remove it.

Read More

Your 'Security' Camera Has a Backdoor the Manufacturer Put There on Purpose

John Z Black Apr 7, 2026

Privacy & Digital Rights #vstarcam #iot #backdoor #pppp #firmware #cameras #consumer-security

Researcher reveals VStarcam deliberately engineered password-leaking backdoors into camera firmware over four years.

Read More

China's BPFDoor Got an Upgrade. Passive Defenses Still Can't See It.

John Z Black Mar 28, 2026

Threat Intelligence #bpfdoor #china #red-menshen #telecom #apt #nation-state #threat-hunting #backdoor

Red Menshen's upgraded BPFDoor backdoor now hides even better inside telecom backbone networks, and the only way to find it is active threat hunting that most carriers aren't doing.

Read More