We just added two tools to generate OSSEC rules online.
You May Also Like
Dissecting the WordPress 5.2.3 Update
- September 13, 2019
Last week, WordPress released version 5.2.3 which was a security and maintenance update, and as such, contained many security fixes. Part of our day to…
Analysis of the Massive NDSW / NDSX Malware Campaign
- June 2, 2022
Recently, Avast’s researchers Pavel Novák and Jan Rubín posted a detailed writeup about the “Parrot TDS” campaign involving more than 16,500 infected websites. Such massive…
Limit Login Attempts Vulnerability – Patch Now!
- April 12, 2023
On April 11th, 2023, a software update was released to patch a severe vulnerability within the Limit Login Attempts WordPress security plugin. With over 600,000…
Black Friday/Cyber Monday Ecommerce Security Threats
- November 25, 2019
With the end of November comes the height of the holiday shopping season — specifically Black Friday and Cyber Monday sales, which typically span the…
New Wave of AnonymousFox Cron Jobs
- March 30, 2022
Recently our Remediation and Research teams have noticed a new wave of malicious cron jobs associated with the notorious AnonymousFox malware. The cron jobs are…
Vulnerability & Patch Roundup — October 2026
- October 31, 2026
If you operate a website, you’re already aware that a single unpatched vulnerability can render your site inaccessible, compromise your reputation, or necessitate extensive remediation…
What Are Cookies & How Do They Work?
- January 3, 2023
As much as I’d love to, we’re not here to talk about baked goods. Cookies are commonly used on websites and an essential component of…
Closed Source E-commerce Platforms Can Be Compromised
- June 3, 2019
These days, the majority of store owners opt-in for the easiest closed-source ecommerce platform options. For the most part, these platforms typically allow users to…
Unsuccessfully Defaced Websites
- September 13, 2018
Defaced websites are a type of hack that is easy to notice and a pain for website owners. Recently, we came across some defacement pages…
Backdoor Obfuscation: tempnam & URL Encoding
- September 28, 2020
In an attempt to avoid detection, attackers and malware authors are always experimenting with different methods to obfuscate their malicious code. During a recent investigation,…








