Serious Cross Site Scripting Vulnerability in TweetDeck – Twitter
Tony Perez This morning as I was logging into various social networks I was presented with a popup from an XSS on Tweet Deck. This obviously set…
Understanding Denial of Service and Brute Force Attacks – WordPress, Joomla, Drupal, vBulletin
Many are likely getting emails with the following subject header: Large Distributed Brute Force WordPress Attack Underway – 40,000 Attacks Per Minute. Just this week…
Stealing Credit Cards – A WordPress and vBulletin Hack
What better way to celebrate Thanksgiving than to share an interesting case that involves two of the most popular CMS applications out there – vBulletin…
Case Study: Analyzing a WordPress Attack – Dissecting the webr00t cgi shell – Part I
November 1st started like any other day on the web. Billions of requests were being shot virtually between servers in safe and not so safe…
The Dangers External Services Present To Your Website
Today the Washington Post reported that they were victims of hack, orchestrated by the Syrian Electronic Army. This attack is interesting because it sheds light…
Joomla Hacks – Part I – Phishing
Joomla is a very popular open source CMS, dominating approximately 10% of the website market. While great for them, horrible for many others, as being…
Dissecting a WordPress Brute Force Attack
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
W3 Total Cache and WP Super Cache Vulnerability Being Targeted in the Wild
As if on queue, almost 7 days since we released the post about the latest W3TC and WP Super Cache remote command execution vulnerability, we…
Apache Web Server Attacks Continue to Evolve
For the past few months we have seen a gradual increase in server-level compromises. In fact, every week it seems we’re handling half a dozen…
LivingSocial Hacked — More Than 50 Million Accounts Compromised
Just as we were thinking we were going to avoid any major enterprise compromises this week, LivingSocial announces that it has been compromised and some…
Joomla Version 2.5.10 Released – Security Updates
This morning the Joomla development team released a new version of the Joomla platform. This is a Security release, so please be sure to update…