JCE Joomla Extension Attacks in the Wild
Daniel Cid Our friends from SpiderLabs, issued a warning today on their blog about increased activity on their honeypots looking to exploit the old JCE (Joomla Content…
Month: March 2014
8 posts
Unmasking “Free” Premium WordPress Plugins
Denis Sinegubko WordPress has a large repository of free plugins (currently 30,000+) that can add almost any functionality to your blog. However, there is still a market…
Windigo Linux Analysis – Ebury and Cdorked
Our friends over at ESET released a very detailed document about the Windigo Operation. The Windigo Operation has been responsible for the compromise of thousands…
Security Exploit Patched on vBulletin – PHP Object Injection
The vBulletin team just issued a warning, and released patches for a security exploit that affected all versions of vBulletin including 3.5, 3.6, 3.7, 3.8,…
Understanding Denial of Service and Brute Force Attacks – WordPress, Joomla, Drupal, vBulletin
Tony Perez Many are likely getting emails with the following subject header: Large Distributed Brute Force WordPress Attack Underway – 40,000 Attacks Per Minute. Just this week…
More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack
Distributed Denial of Service (DDoS) attacks are becoming a common trend on our blog lately, and that’s okay because it’s a very serious issue for…
Joomla Security Updates – Version 2.5.19 and 3.2.3 Released
The Joomla team just released two security updates and pushed out the stable versions for Joomla 2.5.19 and 3.2.3. If you run your site on…
Fake botsvsbrowsers domain
The domain botsvsbrowsers.com is quite popular and used for comparing user agents (browsers) and seeingif a specific request is from a valid user or a…