TimThumb WebShot Code Execution Exploit (Zeroday)
Daniel Cid If you are still using Timthumb after the serious vulnerability that was found on it last year, you have one more reason to be concerned.…
Month: June 2014
12 posts
Spam Hack Targets WordPress Core Install Directories
Do you run your website on WordPress? Have you checked the integrity of your core install lately for SPAM like “Google Pharmacy” stores or other…
Disclosure: Remote Code Execution Vuln in Disqus
Marc-Alexandre Montpas We recently found a security vulnerability in the Disqus Comment System plugin for WordPress. It could, under very specific conditions, allow an attacker to perform…
Case Study: Complexities of “Simple” Malware
Peter Gramantik You know when you pull a string on a sweater and it just keeps going and going? You wonder when or if it will ever…
Is My Website Hacked? If You Have to Ask, Then, “Yes.”
David Dede The problem with phishing, and therefore the reason so many people have trouble with it, is that the code is fairly benign and can be…
CloudProxy + SPDY = A Faster Website
Our Website Firewall already protects and speeds up over 1,000 websites. Now, it’ll be even faster. We’re happy to announce that we just added support…
Serious Cross Site Scripting Vulnerability in TweetDeck – Twitter
Tony Perez This morning as I was logging into various social networks I was presented with a popup from an XSS on Tweet Deck. This obviously set…
WordPress Plugin Alert – LoginWall Imposter Exposed
Rafael Capovilla When you work with malware for a while, you start to become very good at pattern recognition. A couple sites in every hundred cleaned might…
Website Firewall Update – Introducing 2FA and More
Today we are launching the new and improved Protected Page capability in our Website Firewall. It allows for a simple (1-click) activation of secondary authentication…
Take Back Your Internet – Demand a Safer Web
Over the last couple of weeks, we’ve written about malicious redirects pushing users to porn sites, ever more complicated phishing scams being carried out by…
Was the FIFA Website Hacked?
Estevao Avillez As many know, our company has deep Brazilian roots, as such we have no choice but to enamored with the upcoming World Cup. Yes, the…