We just added two tools to generate OSSEC rules online.
You May Also Like
Fixing Website Hosting Issues: “This Account Has Been Suspended”
Rianna MacLeod
- January 24, 2024
Experiencing a “This account has been suspended” warning on your website can be both confusing and alarming. This message means that your hosting provider has…
Obfuscation Techniques in MARIJUANA Shell “Bypass”
Luke Leal
- December 4, 2020
Attackers are always trying to come up with new ways to evade detection from the wide range of security controls available for web applications. This…
PHP Script Nukes All Website Files
Ben Martin
- August 8, 2017
Most malware and spam that we come across has some sort of discernable purpose to it, usually something which benefits the attackers financially. This is…
Abandoned US Congressional Website Used in Asian Gambling Spam Infection
Ben Martin
- July 26, 2023
Website owners and developers tend to buy a lot of domains. With different projects on the go and working with multiple different clients at any…
VPN: A Key to Securing an Online Work Environment
Marc Kranat
- March 27, 2020
The current COVID-19 epidemic is changing the way people work, rapidly moving to working remotely as I have done for 20 years. I am providing…
From Google DNS to Tech Support Scam Sites: Unmasking the Malware Trail
Denis Sinegubko
- August 10, 2023
A vast majority of website malware employ the ever-familiar HTTP/HTTPS protocols for its malicious activities. But, we also periodically confront more interesting hybrid malware leveraging…
Zero-Day RCE in vBulletin v5.0.0-v5.5.4
Marc-Alexandre Montpas
- September 25, 2019
A new remote code execution (RCE) zero-day vulnerability has been disclosed by an anonymous researcher on the full disclosure mailing list this past Monday. This…
Mixed Content Warnings in Google Chrome
Peter Kankowski
- November 14, 2019
Migrating your website to HTTPS may seem like a simple task. Get the TLS/SSL certificate, install it on your web server, and you’re done. The…
Throwback Threat Thursday: WordPress 4.7 WP-JSON Content Injection Vulnerability
Justin Channell
- March 12, 2020
Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…
How to Perform a Website Security Audit ( with Checklist)
Pilar Garcia
- July 24, 2019
Why Should You Audit Your Website for Security? Most hacks and cyber attacks happen because of poor security practices. The first step you can take…