Georgia government sites hacked (and spreading malware)
David Dede *UPDATE: A few hours after this post, they removed the malware from justice.gov.ge and other sites. I am glad we had some effect. You know,…
Amazon.com blacklisted by SpamHaus XBL
Update: Spamhaus contact us to let us know that they removed amazon from the blacklist and are investigating the issue. SPAMHAUS has various blacklists and…
Fingerprinting web applications
This paper describes a technique to remotely detect the version (fingerprint) of a web application. We cover WordPress, Mediawiki and Joomla in the article, but…
Quick Sucuri Update
We are very happy to announce that we reached 5 thousand (yes, 5k) sites being monitored by our Network Integrity Monitor solution. To celebrate, we…
New Security Bloggers Network (SBN) member
We are very happy to be the newest member of the Security Bloggers Network (SBN). Thanks to Alan Shimel for setting this up very quickly…
Downforeveryoneorjustme is down
The service http://www.downforeveryoneorjustme.com/ has been down for at least a few hours already. I got the first notification via sucuri.net a few hours ago saying…
A closer look at the iiscan
The free IIScan was recently announced on the full-disclosure list and I took the time to review it. They announced it as a new generation…
VMware insecure file creation
If you are using the free VMware server on Linux, beware that the installer is creating files with insecure permissions, allowing any user to modify…
Twitter defacement
It is all over the news today that Twitter was defaced yesterday. Lots of speculation regarding what happened, but that’s the alert I received yesterday…
Searching vulnerable sites with Google
At http://sucuri.net/ we have a free online tool that allows you to scan any domain name for security issues. It is very simple and report…
Process monitoring with OSSEC
OSSEC v2.3 was just released and one feature that really interested me was the Process monitoring. That’s what the OSSEC team says about it: “We…