Sucuri Malware Research Team
Sucuri
Marc Kranat
Locking Down the WordPress Login Page
Kyle Knight Due to its flexibility, ease of use, and massive plugin ecosystem, WordPress is a favorite among bloggers, developers, and businesses alike. Given its popularity, attackers…
What Is Clickjacking & How Do I Prevent It?
Originally published: September 8, 2022 by Antony Garand There are a plethora of techniques that attackers use to redirect site visitors and harvest sensitive information…
Why Delaying WordPress Updates Increases Security Risks
WordPress updates help close known vulnerabilities before automated attacks can find and exploit them. Once a patch is released, attackers often move quickly to scan…
What Is ‘Error Establishing a Database Connection’ & How To Fix It in WordPress
Originally published: September 26, 2023 by Rianna MacLeod Experiencing the ‘Error Establishing a Database Connection‘ on your WordPress website? This common error indicates that your…
Vulnerability & Patch Roundup — June 2026
Running a website means a single unpatched vulnerability can take it offline, harm your reputation, or require cleanup. Most compromises begin with automated attacks exploiting…
What is the Principle of Least Privilege?
Originally published: January 9, 2024 by Rianna MacLeod If you own a website and collaborate with other people, the Principle of Least Privilege (PoLP) is…
PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive
A working checkout page is often the moment a business starts to feel real. The products are live, the cart is functional, payments are flowing,…
How to Fix Google Ads Disapproved Due to Malicious or Unwanted Software
Originally published: January 16, 2024 by Rianna MacLeod Were your Google Ads just disapproved after a website compromise? Or, are you seeing policy violations for…
WordPress PBN Plugin Drops Dual Webshells via Database Injection
Puja Srivastava During a recent incident response engagement, our team uncovered a multi-stage WordPress infection that goes beyond the usual file-based malware. The attacker combined a fake…
What is Ransomware?
Originally published: February 12, 2020 by Justin Channell Ransomware has been one of the scariest topics in cybersecurity for years – and for good reason.…
Network Firewall vs. Web Application Firewall (WAF)
Originally published: November 1, 2021 by Allison Bondi As more of business and daily life has moved online, hackers have found a clear opportunity. The…