Follow the latest coverage, related explainers and connected technology stories.
Attackers are exploiting a critical command execution vulnerability in the Collabora Online - Built-in CODE Server app for Nextcloud and have planted malicious PHP software to search for password databases and cryptocurrency wallets. Administrators should update to version 26.4.303 or later, or remove the app, as disabling it alone is insufficient.