Understanding .htaccess attacks – Part 1
David Dede Attackers have been using the .htaccess file for a while. They use this file to hide malware, to redirect search engines to their own sites…
WordPress 3.1.3 available (security fixes)
If you are using WordPress, make sure to upgrade it now. The version 3.1.3 was just released with a few security fixes: * Various security…
LizaMoon SQL injections (ur.php) – Now vcvsta.com, asweds.com, etc.
A couple of months ago the Lizamoon malware / Mass SQL injection was getting a lot of news coverage that it could be affecting hundreds…
osCommerce malware: Cannot redeclare corelibrarieshandler
We have been posting for a while about attacks targeting and infecting thousands of osCommerce sites (CreateCSS, div_colors, etc) and the importance of keeping it…
LastPass hacked? Forcing users to change their master passwords
If you are a LastPass user, you will be forced to change your master password in order to continue using the service. We just read…
WP-DBManager Security update (serious issue)
Just a quick note that if you are using the WordPress WP-DBManager plugin, make sure to update it as soon as possible. Old versions of…
Are WordPress users taking care of their security? State of Blog Security – Part I
Almost two years ago we published an article on the “state of blog security” (focused on WordPress) where we checked the percentage of blogs that…
TheWebbyAwards hacked and compromised with Blackhat SEO
The WebbyAwards web site ( www.webbyawards.com/ ) is currently hacked and compromised with Blackhat SEO. If you try to search for it on Google you…
WordPress 3.1.2 released – Security fixes
The WordPress team just released a new version of WordPress (3.1.2) to fix a security issue where contributor-level users were allowed to publish posts. It…
Jquery4html.co.cc – Malware update – Fake AV Redirections
Weekly (kinda daily) malware update. You can track all our updates by following our malware_updates category. *If your site has been affected with any of…
Mass infections – globalpoweringgathering.com
We first detected malware from globalpoweringgathering.com almost a month ago, and posted on our blog about it. But in the last few days, we started…