We just added two tools to generate OSSEC rules online.
OSSEC online tests
You May Also Like
7 Scary Good Tips to Secure Your Website
Allison Bondi Nothing pairs quite as well as cybersecurity and Halloween. Prepare for more than trick-or-treaters this spooky season with these 5 wicked Website Security tips. 1…
WordPress Admin Login Stealer
Krasimir Konov During an investigation, we identified a WordPress login stealer using the PHP functions curl and file_get_contents. The malicious code was injected into the core file…
Evasion Tactics in Hybrid Credit Card Skimmers
Denis Sinegubko The most common type of Magento credit card stealing malware is client-side JavaScript that grabs data entered in a checkout form and sends it to…
Setting Expectations For Your Website Security
Victor Santoyo I have a website. Sweet! What happens next? Well, it’s a natural question. I had a brilliant idea and purchased a domain name, but what…
Obfuscation Through Legitimate Appearances
Peter Gramantik Recently, I analyzed a malware sample provided by our analyst Edward C. Woelke and noticed that it had been placed in a core WordPress folder.…
Stored XSS in MyBB <= 1.8.20
Marc-Alexandre Montpas The open source PHP forum software myBB recently published a new update, version 1.8.21. This is a security release fixing a Stored XSS vulnerability in…
Troldesh Ransomware Dropper
Luke Leal Over the past few weeks, we’ve seen an increase in Troldesh ransomware using compromised websites as intermediary malware distributors. The malware often uses a PHP…
New Email Course: Common Website Threats & Malware
Rianna MacLeod The digital world isn’t all rainbows, unicorns, and cat gifs; it also has a dark side. As threats become increasingly sophisticated, website owners and administrators…
Personal Online Privacy – Connecting Online
When California passed an online privacy law that will take effect on Jan. 1, 2020, it made me think about a user’s responsibility when it…
Mining Adminers – Hackers Scan the Internet For DB Scripts
Hackers are constantly scanning the internet for exploitable sites, which is why even small, new sites should be fully patched and protected. At the same…