Nethemba | We care about your security

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

We care about
your security.

Nethemba is a leading Slovak IT security firm specialized in web security, penetration testing, and RFID security audits. Since 2007, we’ve been securing businesses with cutting-edge research and expertise, trusted by companies worldwide.

BLOG

Critical security problem in UpdraftCentral: an attacker holding the service’s keys planted a backdoor on our websites

On the night of 19 October 2026 an attacker abused UpdraftCentral, the remote management service built into UpdraftPlus, a backup plugin with more than 4 million installations, and planted a backdoor on two of our three websites. Our sites were fully up to date and the fault was not on our side: the attacker signed the commands with valid keys that the UpdraftCentral Cloud service generates and keeps. We publish an analysis of the backdoor, indicators of compromise and a...

Read More

Facebook

Nethemba
Nethemba18 hours ago
openssh on musl linux (alpine, openwrt, buildroot, yocto, and a lot of the docker images you've pulled) has had a little problem since 2016.
accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters.
https://sshhole.com/
Nethemba
Nethemba19 hours ago
#90 Netmon (HackTheBox) (Easy)
Here we find some non-working credentials which require a little adaptation to gain access to a network monitor. After a search of the version we find a vulnerability which can grant us system access.

https://www.youtube.com/watch?v=38J5IeUobbg
Nethemba
Nethemba2 days ago
WordPress Backup Plugin Developer Compromised, Malicious Code Injected into User Sites
https://www.rswebsols.com/news/wordpress-backup-plugin-developer-compromised-malicious-code-injected-into-user-sites/