WordPress 3.2 and PHP support – Security effect
David Dede WordPress 3.2 is going to be released very soon and one of the biggest changes is that they will drop support for PHP4 and all…
WordPress 3.1.4 available – Time to update
If you are running WordPress, it is time to update it now. WordPress v3.1.4 was just released with security fixes for all the previous versions…
WP-phpmyadmin WordPress plugin – Delete it now
If you are using the WP-phpmyadmin WordPress plugin, delete it now. We are seeing multiple sites getting hacked through it and we are investigating what…
WordPress plugins hacked – Understanding the backdoor
If you haven’t heard about it already, yesterday three popular WordPress plugins (AddThis, WPtouch, and W3 Total Cache) had a malicious backdoor added to them…
Backup, backup and backup
We just heard of a sad story about an Australian web hosting company (Distribute.IT) that was hacked and all of the sites they hosted were…
Google blacklisted all the .cz.cc domains
It seems that Google just blacklisted all the sites under the .cz.cc main domain (including the nic.cz.cc, start.cz.cc and all others). In their status page…
Blackhat SPAM SEO From Joomlapoject.net – Targeting Joomla
We are tracking another Blackhat SEO SPAM network being managed by http://joomlapoject.net. By the name of the domain, you can guess that they are targeting…
Information Leakage on multiple WordPress themes by WooThemes
This weekend there was a post on the Full disclosure list about multiple vulnerabilities on some WordPress themes by WooThemes. This is what the message…
Sony Music Brazil hacked (yet another sony defacement)
I hate to pick on Sony, but they got hacked again (and no, I am not talking about the Lulzsec + sonypictures, this is another…
Links Injection on WordPress – Blackhat SEO Spam (basicpills) update
For the last few months we’ve been tracking a very large blackhat SEO spam campaign initiated by basicpills.com, and many other pharma-related domains (mostly located…
VBulleting SQL injection vulnerability – Update now
A serious SQL injection vulnerability was reported on Vbulletin (4.0.x, 4.1.0, 4.1.1 and 4.1.2) last month and we are starting to see it being used…