Vulnerability & Patch Roundup — September 2026
Sucuri Malware Research Team If you operate a website, you’re already aware that a single unpatched vulnerability can render your site inaccessible, compromise your reputation, or necessitate extensive remediation…
SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor
Gabriel Barbosa Overview During recent website cleanup work, we analyzed a WordPress compromise where the same backdoor kept returning within seconds of every removal, no matter how…
How to Harden & Secure a Website (12 Steps)
Sucuri Originally published: November 11, 2023 by Rianna MacLeod Attackers don’t care what platform you use. WordPress, Magento, Joomla, Drupal – every site is a potential…
How to Quickly Find & Fix Mixed Content Issues (SSL/HTTPS)
Originally published: August 23, 2023 by Rianna MacLeod With the web’s increased emphasis on security, all sites should operate on HTTPS. Installing an SSL certificate…
WooCommerce Security Essentials for Store Owners
Kyle Knight Running a WooCommerce store is awesome for your business – it opens up a whole world of opportunities. But let’s be honest, it also comes…
WordPress Security Plugins: How to Choose the Right One
In short, WordPress security plugins are tools you add to your site to strengthen your settings, scan for malware, watch for file changes, and block…
What is a Website Defacement?
Originally published: March 7, 2023 by Rianna MacLeod Defacement is a form of digital vandalism where attackers change what your visitors see, often replacing your…
Vulnerability & Patch Roundup — August 2026
If you operate a website, you’re already aware that a single unpatched vulnerability can render your site inaccessible, compromise your reputation, or necessitate extensive remediation…
Third-Party Script Security: How Tags, Pixels, and Embeds Can Put Websites at Risk
Third-party scripts are common on websites. They help with analytics, ads, live chat, social media, video, payments, and many other features. While not all are…
What Is a Website Attack Surface? A Beginner’s Guide to Reducing Risk
Each feature that you add to a website results in a new element that has to be managed. The credentials are accepted by a login…
The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.
Luke Herbrandson 2026: the year the tools learned to hack In May 2026, OpenAI began testing an internal research model against a cybersecurity benchmark called ExploitGym. While…