Dre Armeda: WordPress End-User Security

Sucuri Co-Founder Dre Armeda did a great presentation at WordCamp Chicago about end-user security for WordPress users.

Check out the video here:

Dre will also be speaking at WordCamp Las Vegas 2011, make sure to say hi if you’re attending.

David Dede

David is a Security Researcher at Sucuri. He spends most of his time dissecting vulnerabilities and security issues. You won't find him on Twitter because he is paranoid about privacy.

8 comments

Cathy Tibbles says:
November 22, 2011 at 7:28 pm
This is awesome – thanks for sharing it! 🙂
1. Andres Armeda says:
  November 22, 2011 at 7:32 pm
  Glad it was helpful, Cathy 🙂
John Hoff says:
November 22, 2011 at 8:18 pm
Great presentation. Thanks. Quick question though. For FTP I personally use sFTP as well, but wouldn’t FTPS or FTPES be another secured option?
1. David Dede says:
  November 28, 2011 at 4:08 pm
  Yes, FTPS/FTPES are good alternatives as well.
Pingback: PaMdora and the Malware Monster | PaMdora's Box
Pingback: A Little Tale About Website Cross-Contamination | Sucuri Blog
Shi says:
May 5, 2013 at 7:42 pm
why do you sound like President Obama? lol How funny. Thank you for this video.
Linda Willis says:
June 26, 2015 at 3:36 pm
Couldn’t find the video. Has it been taken down?

Comments are closed.

Massive ois[.]is Black Hat Redirect Malware Campaign

Ben Martin
November 8, 2022

Since September 2022, our research team has tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. These malicious redirects…

Read the Post

National Cybersecurity Awareness Month

Juliana Lewis
October 1, 2019

Since 2003, October has been recognized as National Cybersecurity Awareness Month. It is an annual campaign to raise awareness about the importance of cybersecurity and…

Read the Post

How to Fix the NET::ERR_CERT_DATE_INVALID Error

Rianna MacLeod
May 24, 2024

Encountering the NET::ERR_CERT_DATE_INVALID error can be frustrating, but it’s important to address it promptly to ensure your website remains secure and trustworthy. This error typically…

Read the Post

Lateral Movement and Cross-Site Contamination

The Dangers of Lateral Movement & Website Cross Contamination

Ben Martin
January 19, 2024

One of the most frequent problems that we observe in website hosting environments is “cross contamination” — the lateral movement of an attacker between websites.…

Read the Post

Magento 2 PHP Skimmer Saves To Image File

Magento Skimmers: From Atob to Alibaba

Denis Sinegubko
August 7, 2019

Last year we saw a fairly massive Magento malware campaign that injected credit card stealing code similar to this: It uses the JavaScript atob function…

Read the Post

How to Backup a WordPress Site for Free with WP-CLI

Rianna MacLeod
December 22, 2022

Regular website backups are the foundation of a solid website security plan. In the event of data loss or malware infection, restoring a WordPress backup…

Read the Post

Server Side Data Exfiltration via Telegram API

Cesar Anjos
March 18, 2021

One of the themes commonly highlighted on this blog includes the many creative methods and techniques attackers employ to steal data from compromised websites. Credit…

Read the Post

Fake “Fix It” Pop-Ups Target WordPress Sites via Malicious Plugin to Download Trojan

Puja Srivastava
October 18, 2024

In our recent investigation, we discovered a new malware campaign targeting WordPress sites through a fake plugin, universal-popup-plugin-v133, which delivers deceptive browser fix pop-ups. This…

Read the Post