The Rank Math PRO 3.0.123 backdoor, EİDS fines for Meta and TikTok, and Microsoft treating AI agents as the new insider threat
Today’s 3 verified stories: Rank Math said the PRO 3.0.123 packages downloaded between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware able to take over a site if activated. Türkiye’s Trade Ministry reported that, in its EİDS inspection of social media property and vehicle listings, it fined 70 businesses 7 million TL in total, Meta Platforms İstanbul 20 million TL and TikTok İstanbul 4 million TL. On October 19, 2026 Microsoft announced a security package that treats AI agents as a new kind of insider threat. The detailed look at each story, its sources and what it means for your business lives on its own page.
Rank Math PRO 3.0.123 downloads from the vendor’s own site carried a backdoor
Rank Math announced a security problem affecting a limited group of users who downloaded PRO version 3.0.123 of its WordPress SEO plugin between 20:02 UTC on October 15, 2026 and 07:12 UTC on October 16, 2026. According to the company, the affected files held malware able to take over a site if the plugin was activated, and BleepingComputer puts the window at about 11 hours. The malware sets up persistent access, talks to the domain rank1cdn.com and can recreate its hidden backdoors. Anyone who activated that version is advised to treat the site as compromised; the clean build is 3.0.124. The free plugin on WordPress.org was not affected. Rank Math asks for every password and access credential to be rotated even after a backup restore.
Türkiye’s Trade Ministry fines Meta 20 million TL and TikTok 4 million TL over listing verification
In a notice dated October 19, 2026, Türkiye’s Trade Ministry said its EİDS inspections of property and vehicle listings on social media are continuing. Seventy real estate and car dealers that posted listings in breach of the rules on Instagram, Facebook and TikTok received administrative fines totalling 7 million TL, bringing the number of businesses sanctioned under this scope to 152 and their fines to 15.2 million TL. Meta Platforms İstanbul was fined 20 million TL and TikTok İstanbul 4 million TL, on the grounds that they had not integrated with EİDS and had not met identity and authority verification obligations. The ministry wants posts to carry an EİDS-verified listing link and the price.
Microsoft treats AI agents as the new insider threat
On October 19, 2026 Microsoft announced a security package that treats AI agents not as outside attackers but as a new kind of insider working with authority inside the organization. According to Nadim Abdo of Microsoft Security, agents create insider-style risk because they are given access to company data, applications and systems. The package includes a team of Guardian Agents, discovery that now covers 60 local agent types, Dynamic Permissions that start an agent with no access and grant task-scoped, time-bound rights, and Dynamic Conditional Access that answers risk in steps. The enforcement boundary sits outside the agent's reach.
The agenda moves fast, the system stays calm.
Let us talk about what these shifts mean for your business and work out together which step fits you.