Blog Search
Like Box
Comments
- Dreamhost hacked, mass password-reset issued | ZDNet on DreamHost Security Issue Prompts FTP Password Resets
- Experiences with using GoDaddy, Linux Web Hosting | The (Unorganized) Musings of a Computer Scientist on GoDaddy store your passwords in clear-text and may try to SSH to your VPS without permission
- » Wordpress Security Best Practices & Plugins on Timthumb.php Mass Infection – Aftermath – Part I
- WordPress.org repository will not show plugins older than 2 years on WP-phpmyadmin WordPress plugin – Delete it now
- Wordpress News - The Best WordPress Tips and Tutorials of 2011Wordpress News on Cleaning up an infected website – Part I: WordPress and the Pharma Hack
Tags
alexa apache ask awareness backdoors blacklist blacklisted bluehost dns fox georgia godaddy google guides hacked history honeypot htaccess iis joomla logs malware malware_updates netsol openx oscommerce ossec passwords pharma phishing plugin review sbn scan security spam stats sucuri twitter vbulletin virus vulnerability walmart whois wordpressArchives
- January 2012 (6)
- December 2011 (4)
- November 2011 (4)
- October 2011 (7)
- September 2011 (8)
- August 2011 (16)
- July 2011 (5)
- June 2011 (10)
- May 2011 (10)
- April 2011 (15)
- March 2011 (18)
- February 2011 (13)
- January 2011 (7)
- December 2010 (7)
- November 2010 (9)
- October 2010 (12)
- September 2010 (10)
- August 2010 (7)
- July 2010 (10)
- June 2010 (15)
- May 2010 (19)
- April 2010 (16)
- March 2010 (15)
- February 2010 (8)
- January 2010 (7)
- December 2009 (4)
- November 2009 (1)
- October 2009 (2)
- September 2009 (1)
- August 2009 (6)
- July 2009 (11)
- June 2009 (7)
- May 2009 (4)
- April 2009 (1)
Monthly Archives: July 2009
Multiple top-security sites hacked (zf05)
If you follow the full disclosure mailing list, you are probably aware that many sites of top security professionals were hacked (including Kevin Mitnick, Robert Lemos from Security Focus, Dan Kaminsky, etc). I know how easy it is to forget … Read more
Matasano.com hacked
Matasano has just been hacked. They are one of the top security web sites with an amazing group of professionals. This is the screenshot: I don’t know what happened, but it probably wasn’t a 0-day as people are saying. If … Read more
Careful with Those Shortened Links
Awesome article by Dailyblogtips about the Security of Short links. They even mention Sucuri: If you want to be safe, therefore, only click on shortened links if you trust who created them. If you must or want click on a … Read more
Sonia Gandhi site hacked
It is not the first time her site got hacked, but we would image that they would be taking their security a bit better by now. Not only her, but the site of Manmohan Singh (Indian Prime Minister) got hacked … Read more
Australian Air Force site hacked
And it it still defaced (for more than couple of hours). Link http://www.airforce.gov.au/. Snapshot:
Sucuri.net Updated
Another set of updates from http://Sucuri.net. First, we improved the email alerts to be more clear and removed some false positives from the snapshot comparisons. We were offline for a few hours on Sunday, but everything is back in order … Read more
Network Integrity Monitoring Article on DailyBlogTips
Integrity monitoring is a very common practice on server security, generally done inside a file system, where it creates a cryptographic checksum of all your files and if something changes you get an alert. Useful, no? This is called FIM … Read more
SSH 0-day exploit rumors
People are going crazy with the SSH 0-day exploit rumors. Some are even considering to switch back to telnet because of that. Finally, an official voice from Damien Miller of the SSH development team suggesting that it is just FUD … Read more
Posted in Uncategorized
Leave a comment
Sucuri Quote from Lenny Zeltser
Quote from Lenny Zeltser (from SANS) on Twitter about Sucuri: Free service by @sucuri_security detects changes to website content, DNS, whois records: http://sucuri.net. Quite handy. Glad to see it is being useful!
Sucuri Quote on the Security Basics list
Quote from about Sucuri from Manuel Aróstegui on the security-basics mailing list. This is the first tool I have seen just focused on the Internet domains monitoring. The interface is simple and easy to manage. Well done!
Posted in Uncategorized
Leave a comment