<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cms on Locodigital</title><link>https://locodigital.com.br/en/tags/cms/</link><description>Recent content in Cms on Locodigital</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Mon, 18 May 2026 09:00:00 -0300</lastBuildDate><atom:link href="https://locodigital.com.br/en/tags/cms/index.xml" rel="self" type="application/rss+xml"/><item><title>JDownloader hacked: the attack nobody saw coming</title><link>https://locodigital.com.br/en/technology/jdownloader-supply-chain-attack-and-a-python-rat/</link><pubDate>Mon, 18 May 2026 09:00:00 -0300</pubDate><guid>https://locodigital.com.br/en/technology/jdownloader-supply-chain-attack-and-a-python-rat/</guid><description>&lt;p&gt;Little in information security is as brutal as discovering that the place where you downloaded a &lt;em&gt;trusted&lt;/em&gt; program served, for 48 hours, a trojan horse instead of the original executable. That's exactly what happened to JDownloader between 6 and 7 May. The official site — not a mirror, not a pirated copy, the official domain — handed Windows and Linux users an installer swapped for a &lt;strong&gt;Python RAT&lt;/strong&gt; capable of arbitrary remote execution. And anyone who clicked "download" in that window now has a machine compromised right down to the operating system.&lt;/p&gt;</description></item></channel></rss>