WordPress XML-RPC Flaw Led to Full VPS Takeover and Crypto Mining

·1 views

A developer discovered their client's VPS had been fully compromised after attackers exploited a vulnerable WordPress installation, likely via XML-RPC or an arbitrary file upload flaw. The breach went beyond the website itself — attackers created rogue admin accounts in WordPress and CyberPanel, added unauthorized SSH keys, and planted a root-level OS user. Malicious PHP files were hidden inside deeply nested directories, and a disguised crypto-mining process called libnet-cache was configured to automatically restart if killed. Persistence was enforced through tampered systemd services, malicious cron jobs, and immutable file attributes that initially blocked even root-level deletion. Cleanup required restoring the chattr binary, stripping immutable flags, removing all unauthorized access points, and reinstalling WordPress core via WP-CLI.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Reel Quick adds configurable video transition duration with 0–4 second range

Open-source video editing tool Reel Quick has introduced a new feature in issue #13 that lets users control the duration of scene transitions, replacing a previously fixed value. A frontend slider allows creators to set transition lengths between 0.0 and 4.0 seconds in 0.5-second increments, with 0.0 disabling transitions entirely. The selected value is passed to the backend, where it is validated for range, step size, and clip length compatibility before being fed into FFmpeg for video generation. Because transitions overlap adjacent clips rather than adding time, the final video length equals the sum of all clip durations minus the total transition overlap. Both frontend and backend changes were required, including inline validation and a default fallback when no transition duration is supplied.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Integrate Terraform and YAML into a Practical CI/CD Pipeline

A technical guide published on DEV Community outlines best practices for integrating Terraform and YAML configurations into CI/CD pipelines for automated infrastructure deployment. The article recommends a clearly separated repository structure, distinguishing generic Terraform code from environment-specific YAML configuration files across dev, staging, and production environments. It details essential pipeline stages — including validation, planning, and application — using GitHub Actions as a reference, while noting the principles apply to any CI/CD platform. The guide also covers branching strategies, modular Terraform design, and hierarchical YAML management to enable consistent and reliable infrastructure provisioning. Security considerations and reusable module patterns are highlighted as key elements for production-grade Infrastructure as Code workflows.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Flux Schema Plugin Shifts Kubernetes Manifest Validation Left into CI

Flux 2.9 introduced Flux Schema, a CLI plugin that validates Kubernetes manifests against JSON Schema and CEL rules before they reach the cluster. It uses the same evaluation logic as the Kubernetes API server, catching type mismatches, unknown fields, and cross-field constraint violations at the pull request stage rather than during reconciliation. The plugin supports built-in schemas for Kubernetes, OpenShift, Gateway API, and Flux CRDs, requiring no additional setup for common resource types. Users can configure exclusions via a .fluxschema.yml file and integrate validation into GitHub Actions using two composite actions provided by the project. The plugin's schema catalog refreshes daily from upstream releases, ensuring CI always validates against current API versions rather than outdated snapshots.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Aidbase MCP Server Enables Self-Updating AI Support Bots Without Manual Intervention

Developers building AI-powered customer support systems often struggle with knowledge drift, where chatbots continue serving outdated information after product or policy changes. The Model Context Protocol (MCP), as implemented by Aidbase, addresses this by giving AI agents write access to support knowledge bases through tools like add_aidbase_faq_item and add_aidbase_website_knowledge. This allows developers to trigger knowledge base updates directly from their IDE or chat interface at the end of a code change, eliminating the manual step of logging into support dashboards. The Aidbase MCP server also exposes tools to manage multiple chatbots and monitor inbox configurations, enabling agents to audit support infrastructure without leaving the development environment. The approach reframes AI support from a static retrieval problem into an automated, self-healing operational loop integrated into the development lifecycle.

0 comments Read more at DEV Community