My WordPress Website Was Hacked
Tony Perez Before you freak out, allow me to clarify. It was one of several honeypots we have running. The honeypots are spread across the most commonly…
Month: August 2014
8 posts
Security Advisory – Akeeba Backup for Joomla!
Marc-Alexandre Montpas We have also released a more recent post exploring this vulnerability further: The Details Behind the Akeeba Backup Vulnerability If you’re a user of the…
Thoughts on WordPress Security and Vulnerabilities
David Dede As avid readers of this blog know, we’ve discovered or written about multiple vulnerabilities within the WordPress ecosystem over the last couple of weeks specifically…
Website Malware: Mobile Redirect to BaDoink Porn App Evolving
Peter Gramantik Recently, we wrote about a malware redirect causing compromised sites to redirect their visitors to pornographic content (specifically, the BaDoink app). You can read more…
Critical Vulnerability Disclosed on WordPress Custom Contact Forms Plugin
If you’re a using the Custom Contact Forms WordPress plugin, you need to update it right away. During a routine audit for our WAF, we…
WordPress and Drupal Core Denial Of Service Vulnerability – Moderately Critical
Both WordPress and Drupal are affected by a DoS (denial of service) vulnerability on the PHP XML parser used by their XMLRPC implementations. The issue…
Website Security Analysis: A “Simple” Piece of Malware
For regular readers of this blog, there is one constant that pops up over and over: Malware gets more complex. When malware researchers, like myself,…
Yoast and Sucuri Partner to Create a Safer Web
We’re very excited to finally talk about a partnership that’s been in the works for a few months and in light of the serious nature…