Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

The Hacker News · Wednesday, 14 October 2026 at 17:38 (3h ago) · Original article ↗

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.

A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Flock CEO: We haven’t ‘fired’ any police departments as customers

Flock CEO Garrett Langley said that the surveillance company has not canceled contracts of any police department or law enforcement agency, despite reports of abuse.

TechCrunch 34m ago

Security

Microsoft and Japan took down a cybercrime network behind over a billion scam messages

We've all gotten a scam text about a nonexistent parking ticket or a fake package delivery, but hopefully you'll start seeing fewer of them. Microsoft says it helped dismantle a marketplace for scammers sending phishing messages like those around the world. Through an…

The Verge 57m ago

Security

FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested

The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]

BleepingComputer 1h ago

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

More Security & Privacy

Flock CEO: We haven’t ‘fired’ any police departments as customers

Microsoft and Japan took down a cybercrime network behind over a billion scam messages

FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested