Joomla 2.5.7 Released (Security Update)
David Dede Joomla 2.5.7 was just released today fixing 2 low severity security bugs and added a few other improvements. As always, we recommend all our Joomla…
WordPress Security Presentation (in Portuguese)
Bruno Borges (from our security team), did a great presentation at WordCamp Sao Paulo (Brazil) about WordPress security and how to keep a site secure.…
Fan of Twilight? Be Very Careful If You’re Looking Online For It
If you like the Twilight series, be careful if you plan to do any “research” on it, or if you plan to visit the site…
Magento Security Update (1.7.0.2) – Zend_XmlRpc Vulnerability
A few days ago, Magento 1.7.0.2 was released to fix a very serious security vulnerability that allows attackers to read any file on the web…
Joomla 2.5.5 released (security update)
Joomla 2.5.5 was just released today, with a few bugs fixed and 2 important security updates for a privilege escalation and an information disclosure issue:…
Security Vulnerability in MySQL
A serious security vulnerability discovered in MySQL was disclosed this weekend. It basically allows anyone to bypass authentication and log in directly into the database.…
PRWeb Stores Passwords In Clear Text
It is 2012 and with the growing web threats you would expect to see increased measures to protect user credentials. We hope that in the…
WHMCS Website Hacked and Database Leaked
The WHMCS website and twitter accounts got compromised yesterday, and their full database (and files) were posted online. Yes, it means that if you have…
Joomla updates (1.5.26 and 2.5.4)
If you are using Joomla, now is a good time to check if your sites are updated. Some (high severity) vulnerabilities were fixed in the…
e107 Being Exploited – Vulnerable contact.php Scanned and Attacked
We are seeing an old vulnerability on e107 being widely scanned and exploited. e107 is a free open source content management system (CMS). More details…
Malware Campaign from .rr.nu
No, they don’t quit, so get used to it! We are seeing quite a few websites being compromised with malware getting loaded from random domains…