admin 
- Malicious JavaScript was found in DebugBear’s monitoring script on October 29, 2026. DebugBear later confirmed that attackers had compromised its DNS records.
- DebugBear told customers to remove its Real User Monitoring script from their websites.
- SEO teams should ask developers and security staff to check for unauthorized access, malicious changes and backdoors.
DebugBear, a Real User Monitoring tool widely used by SEO experts, reported an attack. Site owners must remove its script and check for unauthorized access.
