❌

Normal view

Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware

Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own

Amazon To Fund 12 Small Nuclear Reactors At Former Indiana Coal Plant

By: BeauHD
19 October 2026 at 22:30
An anonymous reader quotes a report from TechCrunch: Amazon is funding development of a proposed 960-megawatt nuclear plant in Indiana and would be the first customer to buy its power, the companies announced Monday. Utility company American Electric Power (AEP) would operate the plant. X-energy, which designs small modular nuclear reactors and went public in April, would supply the reactors. The new power plant would consist of 12 Xe-100 small modular reactors and be located on the site of a demolished coal power plant just south of Terre Haute. The deal is the second commercial agreement between Amazon and X-energy, and it's three times larger than the first, which was announced two years ago. Amazon has invested heavily in X-energy, leading a $700 million Series C-1 round in October 2024. The two companies have said they ultimately plan to build 5 gigawatts of new nuclear generating capacity in the U.S. by 2039. Unlike many newly announced power plants, these reactors would be connected to the public electric grid, though Amazon says the power would also serve its data centers. The companies' aggressive timeline still depends on X-energy successfully delivering its first power plant at a Dow Chemical plant southeast of Houston, Texas. The site, called Seadrift, has recently been at the center of a lawsuit filed by the state of Texas, which accuses the plant of "habitual non-compliance" with water and solid-waste regulations and permits. X-energy has yet to break ground at Seadrift, which will host four Xe-100 reactors to provide the chemical plant with heat and electricity. The company said its construction permit is in the final phases of the U.S. Nuclear Regulatory Commission's review process.

Read more of this story at Slashdot.

Is there any good way to easily determine which installed plugins are not used on the site anymore (basically orphaned)?

19 October 2026 at 20:57

I’ve inherited responsibility for a wordpress site. It has a lot of plugins that I have a feeling are no longer used. For security, I’d like to disable and remove any that are not being used. Is there any good way to determine that with some certainty without going through a huge hassle?

submitted by /u/Unhooked-
[link] [comments]

Professor Calls To Abolish Business Schools For Failing Society

By: BeauHD
19 October 2026 at 18:00
joshuark writes: Professor Christopher Marquis makes a provocative argument about business schools: "We need to abolish them." A 20-year business educator at Harvard, Cornell and Cambridge, Marquis argues in The New York Times and on LinkedIn that MBA programs sanctify profit-driven dealmaking at the expense of public life. "That's not the institution failing," he writes. "Sadly, it's the institution working." "Business school doesn't just hand out skills and a network," argues Marquis, "it quietly reshapes how people see the world, rewarding dealmaking, simplification, and optimization for financial metrics, while workers and communities become afterthoughts." Marquis points to research suggesting that business-school-trained CEOs often benefit shareholders at the expense of workers, without delivering measurable improvements in company performance... "[W]hen a business-school-trained CEO takes over a firm, wages fall and labor's share of income drops, with no gain in productivity," writes Marquis. "In both the U.S. and Denmark, what passes for the 'managerial skill' of business-school graduates turns out to be a transfer of wealth away from workers and toward shareholders. Students deserve better than a machine that narrows their sense of what's possible."

Read more of this story at Slashdot.

Built a follow-up-only app after years in sales and would love r/CRM’s honest take

I’ve been reading this sub for a while and I've noticed a pattern. Someone asks what their CRM actually needs to do, and the best answers almost always land in the same place: make logging a call fast, attach a next step with a date, and show who’s overdue. Everything else is optional.

A thread from earlier today is a good example: it describes a 6-month sales cycle with the whole team living in Google Sheets. Nearly every reply says some version of the same thing: Missing features matter a lot less than deals going quiet in month 4 because nobody remembers what was promised in month 1. And if logging takes longer than typing it into the sheet, people go back to the sheet.

This was my life for about 10 years in sales before I moved into product design. The logging and follow-up cadence just felt like admin, so they didn't get done the way they should. So I built an app where you log a call or meeting and set the next follow-up in the same motion, in under 30 seconds, and it shows you who’s due and who’s slipping. That’s basically it.

It's not a team CRM (so no pipeline, no forecasting, no dashboards, etc.). It's for individuals in relationship-heavy jobs who are buried in follow-ups and don't want a Salesforce. I'm starting with real estate agents.

Mods, if this isn’t allowed, please delete. I'm posting here because this community describes the problem better than anywhere else I've seen. I'd genuinely value feedback from people who've actually rolled out CRMs:

  • Where does a follow-up-only tool break down? At what point does someone outgrow it?
  • When you've put a CRM in front of reps, what made the logging habit actually stick, or not?

If you want to poke at it: ozzo.work (iOS and web). Any feedback, even blunt, would mean a lot.

submitted by /u/ericsaber
[link] [comments]

TP-Link Moves to Assemble Routers In the US Following Import Ban

By: BeauHD
19 October 2026 at 17:00
TP-Link plans to begin assembling routers in Mississippi as early as 2027 after the FCC banned imports of new foreign-made consumer routers over security concerns. Engadget reports: The company has signed a letter of intent with manufacturer Key Tronic and, pending approval from regulators, TP-Link says stateside assembly of its routers could start at a Mississippi production line as soon as early 2027. Once things are up and running, Wi-Fi 8 routers are expected to be among the first TP-Link products that Key Tronic assembles. TP-Link claims that the agreement is part of its "long-term effort to accelerate US investment in high-tech manufacturing and job creation, designing and assembling next-generation products for American consumers here on American soil." The company said it will still have to source components from outside the US. "Many [components] are just not available from a domestic source, and this is not a TP-Link issue," TP-Link's corporate affairs officer Steve Kovsky told PC Mag. "This is an issue for all manufacturers that are trying to onshore manufacturing."

Read more of this story at Slashdot.

How to deal with a theme being removed from themeforest?

19 October 2026 at 16:19

So long story short, I used to run a webzine and used a theme from Themeforest and a couple of addons from Codecanyon, but due to health issues I had to shut it down after a couple of years.

Fast forward 5ish years and I'm eager to get back into it. However, when I log back on to the mentioned sites, all of the themes and addons I bought back then are removed from the marketplace, and theres no easy way of contacting the authors. I can still download them all except for one, but none of them are being updated.

So my question is, how do you guys deal with that? Is that just something you have to accept? It doesn't seem very viable for long-term projects.

PS. I even made sure I bought themes and addons from big and popular authors back in the day to avoid this problem, but guess that doesn't change much.

submitted by /u/Past-Sprinkles-7227
[link] [comments]

Trump DHS Officials Asked CISA To Secretly Aquire and Hack a Voting Machine

By: BeauHD
19 October 2026 at 16:00
Longtime Slashdot reader fahrbot-bot shares a report from ProPublica: A few months into President Donald Trump's second term, political appointees at the Department of Homeland Security (DHS) wanted Cybersecurity and Infrastructure Security Agency (CISA) to secretly acquire a voting machine and hack it. The appointees wanted the Cybersecurity and Infrastructure Security Agency to procure the machine, examine it and report back the findings so they could be given to the White House, according to two former administration officials with knowledge of the request. The proposition was shocking to CISA's career staffers, according to one of the former officials. CISA typically worked to thwart hackers. Moreover, the agency had been directed not to alert the voting machine company if it uncovered flaws, contrary to its standard practices. The request made the CISA employees fear they were being asked to take part in political interference. "My thought was they could keep it in their back pocket to invalidate any [election] results they don't like," one of the former officials said. "This goes against everything CISA represents." [Or, perhaps do something worse?] The CISA employees repeatedly told the political appointees that their request was impossible, in part because the agents capable of pulling off such an operation had just been laid off by Elon Musk's Department of Government Efficiency (DOGE) initiative. The appointees eventually stopped pressing CISA. Though not acted on, the request shows how the Trump administration has tried to use the agency for its own ends while draining it of resources for one of its critical missions: protecting the nation's voting systems.

Read more of this story at Slashdot.

Looking for a WooCommerce search plugin/solution similar to Rulmeca

19 October 2026 at 14:04

I am working on an e-commerce website using WordPress/WooCommerce and am looking for a plugin or custom logic similar to the search experience used on:

https://www.rulmeca.com/en

If anyone knows of a plugin or approach that achieves this, please let me know.

Thanks,

submitted by /u/aftab-khalid
[link] [comments]

Can't log in to Wordpress.org/forums - account disabled

19 October 2026 at 13:04

Getting a little frustrated and nowhere to turn - maybe someone else has an idea.

I've had a wordpress.org account for a number of years - been using WordPress for 15 years now. The other week I tried logging in to post a comment on a forum post and found my account had been disabled.

I reached out the email address they provide (forum-password-resets) and had a email chain with 4 replies and responses over the course of a couple of days. Then, crickets. So I waiting 3 weeks, then opened another email thread - crickets.

There was no solid reason for the denied access other than the genreic responses of maybe I created a duplciate account, or logged into multiple accounts etc - but I hadn't and haven't.

I do move a lot (I'm a full time RV'er) and pretty much every week I move to a new location 100+ miles from the last. I provided a documented log of places I've been in the past 4 months, and we use Starlink, Verizon and T-Mobile as connection IPs - so they are constantly changing. I have a single computer, so I'm not logged in from multiple locations either.

I provided access to our public site that documents our RV journey which shows 197 campgrounds in 39 different states in the past 927 days. Yes, we move a lot :)

Does anyone have any other ideas on how I can gain access again to the forums? I rarely post (11 posts in 5+years). The problem now however is that I need to get support from a free plugin, but they say to use the forums for support - and the forums have me blocked.

Any ideas?

submitted by /u/conor_treacy
[link] [comments]

Has anyone successfully converted Flatsome UX Builder pages to Gutenberg / Kadence Blocks?

19 October 2026 at 04:40

I'm looking for a reliable way to migrate WordPress websites built with Flatsome UX Builder to Gutenberg, preferably using Kadence Blocks.

I have several websites built with Flatsome, and I'd like to move away from its proprietary shortcodes without having to rebuild every page manually.

I'm particularly interested in preserving the existing content, layouts, images, links, and overall design as much as possible.

Has anyone actually tried this kind of migration?

  • Are there any tools, plugins, or scripts that can automate at least part of the process?
  • Has anyone used AI to convert Flatsome shortcodes into Gutenberg or Kadence Blocks?
  • What were the biggest challenges, and how much manual work was still required?

I'm aware of Flatsome's own migration tools, but my goal is to move away from the Flatsome ecosystem entirely.

I'd really appreciate hearing from anyone who has successfully done this, even partially. Real-world experiences and practical solutions would be especially helpful.

submitted by /u/Exact-Jeweler-7162
[link] [comments]

A Hacker Broke Into John Deere, SharkNinja With an Army of AI Agents

By: BeauHD
19 October 2026 at 15:00
An anonymous reader quotes a report from The Verge: A hacker broke into more than 100 websites using an army of AI agents that mostly operated on their own, according to findings from the AI security firm Norforge. Though Norforge doesn't name the targets, Reuters reports that the victims included companies like John Deere, SharkNinja, and Cummins. [...] Researchers at Norforge uncovered the attacks through exposed work on Cairn, an open-source AI platform that describes itself as a "general-purpose problem-solving engine." With Cairn, users set a start and end point for the AI agents, which document their progress as they move forward with the task. However, as noted by Norforge, hackers can also use the tool to orchestrate cyberattacks using AI agents. The hacker who broke into more than 100 sites was the "most active" among the exposed Cairn instances discovered by Norforge, waging attacks on companies based in the US, Canada, Australia, and Japan, as reported by Reuters. This attacker laid out "preferred intrusion tactics" using fewer than 100 Chinese characters, with successful breaches taking about 23 hours, according to Reuters. Overall, Nordforge found more than 20 exposed Cairn instances that are "likely malicious." A John Deere spokesperson said there is "no indication that sensitive information was accessed" as a result of the attack, while Cummins said it's "investigating the report of a potential cyber-attack on a website operated by one of our third-party vendors." Meanwhile, SharkNinja says the breach impacted a standalone site with product support information, and that it has contained the threat.

Read more of this story at Slashdot.

Apple Announces October 28 'Pro and Tell' Event

By: BeauHD
19 October 2026 at 14:30
Following its October 13 HomeView launch, Apple is gearing up for its second hardware event of the month. The event is scheduled for October 28 in Los Angeles and carries the tagline "Pro and tell." 9to5Mac reports: Rumors say Apple has a slew of new products to announce at its next event, headlining by its first MacBook Pro with a touchscreen and OLED. According to Bloomberg's Mark Gurman, here's what's on the docket: - New 14-inch and 16-inch touchscreen MacBook Pro models with OLED displays. They will also have a Dynamic Island for the first time and will be "significantly lighter" than the current models. The new MacBook Pro models are expected to be powered by the M5 Pro and M5 Max chips. - A revamped iPad mini with an OLED screen, a "revamped speaker system," and a relocated FaceTime camera - New iMac and entry-level 14-inch MacBook Pro models powered by the M6 chip, which will "look like their current versions."

Read more of this story at Slashdot.

Painpoints with Salesforce and HubSpot

Hey there!

Small team from Sweden who build an MCP native CRM from the ground up with highest ambition level to help organisations get off salesforce without disrupting their processes.

I'd love to listen into existing pain points with Salesforce and HubSpot so we can ensure a better product and make the transition as smooth as possible.

Just comments in the thread is valuable, but jumping on a 20 min call to go through it in detail would be fantastic!

submitted by /u/Sad_Character156
[link] [comments]

Florida DMV Hacked After Police Dept Insecurely Stored Login Info

By: BeauHD
19 October 2026 at 14:00
Florida's DMV says a September 4 breach exposed driver's license and motor vehicle records after attackers obtained credentials that a local law-enforcement employee had "improperly stored on an electronic device." The ShinyHunters group has been linked to the intrusion. Ars Technica reports: In a notice posted Friday, [Florida Department of Highway Safety and Motor Vehicles (FLHSMV)] confirmed that it took "immediate steps" after discovering that "a malicious actor accessed certain department records on September 4, 2026, using compromised credentials." There's "no evidence" that data has yet been misused, the department said, but law enforcement "determined the information potentially affected includes driver license and motor vehicle data, to include document images, and other personal information." [...] On a webpage describing the security incident, FLHSMV confirmed that an "international cybercriminal organization" was behind the breach but did not specify which group or how long they had access. Instead, officials claimed to have "promptly mitigated the breach, launched an investigation, and issued required notification to state authorities." Mitigations included "blocking unauthorized access, resetting relevant user credentials, engaging cybersecurity professionals, and implementing additional safeguards to protect sensitive information," FLHSMV said. Florida's investigation is "ongoing," officials said, but a cybercriminal group called ShinyHunters -- which recently claimed credit for hacking the FBI -- may have stolen the data. Florida residents affected by the breach will receive a letter offering one year of free credit monitoring through Sontiq, Inc. Those whose contact information is outdated can email the FLHSMV at [email protected] to determine whether their data was compromised.

Read more of this story at Slashdot.

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities

Elon Musk Vows To Give a SpaceX Share To 'Every Kid In America'

By: BeauHD
19 October 2026 at 13:00
An anonymous reader quotes a report from CNN: Elon Musk has said he will give every child in America a stake in SpaceX, his $2 trillion aerospace and artificial intelligence company, as tech firms face intensifying scrutiny over their impact on society. "Next year, I will give one of my SpaceX shares to every kid in America," he wrote on X on Monday. "This will be the first of many." SpaceX only began trading publicly in June (and after the biggest initial public offering in history). The company's shares were trading for about $146 when the market closed on Friday. Musk's proposal was thin on detail. It is not clear how those shares would be distributed to the tens of millions of American children or whether all of them would even be eligible. According to the United States Census Bureau, there are roughly 73 million people under the age of 18, making Musk's potential giveaway worth about $10.7 billion at SpaceX's current share price. The move came in response to Anthropic's announcement on Sunday that it will commit at least 5% of its shares to a "Public Benefit Fund" that will donate money to social causes. "I recommend giving the shares directly to the public," Musk said in a reply to Anthropic's announcement. "This is what I will be doing."

Read more of this story at Slashdot.

Wine Ported to OpenBSD

By: BeauHD
19 October 2026 at 12:10
Wine has been successfully ported to OpenBSD, with developers reporting that dozens of 64-bit Windows applications now run on the operating system. "Even the Remaster of The Witcher 3 which released just last month runs, and runs well," writes Thomas Frohwein, OpenBSD developer and ports maintainer. OSnews reports: The biggest limitation seems to be the lack of support for WoW64, so 32bit Windows software won't work. Still, this is a massive milestone for OpenBSD, and makes especially gaming a somewhat viable option on OpenBSD.

Read more of this story at Slashdot.

Got Email from Wordfence: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads

19 October 2026 at 11:43

I am using RankMath Pro some of my websites one of my sites I was getting huge bot visit from afternoon. From my Crisp chat dashboard I see most of visit coming from Singapore then I block Singapore but after that I see coming from multiple countries.

Full email

Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was downloaded or installed through an update between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC.

If an affected copy of Rank Math SEO PRO 3.0.123 was active on your website, you should treat the website as compromised. Simply updating the plugin is not enough because the malware may have placed additional files, administrator accounts, or scheduled tasks elsewhere on the server.

Rank Math removed the affected files and released version 3.0.124 as the clean replacement. Version 3.0.123 by itself does not prove that a website was compromised: Rank Math limits the incident to users who downloaded or updated to the affected version during the stated period.

Website owners should check when version 3.0.123 was downloaded or installed, and use Rank Math’s security notice as the authoritative source for updates about this incident.

So I think delete the previous version and install the new version.

submitted by /u/mamunnu
[link] [comments]
❌