Update WP Super Cache and W3TC Immediately – Remote Code Execution Vulnerability Disclosed
Tony Perez Shame on us for not catching this a month ago when it was first reported, but it seems that two of the biggest caching plugins…
Cyber Criminals Take Advantage of Recent Boston Attack with SPAM
It pains me to write about this at all, but as despicable as this might appear, cyber criminals have started to take advantage of those…
WordPress Malicious Plugin – WPPPM – Abusing 404 Redirects with SEO Poisoning
Bruno Borges, of our security team, came across an interesting case this week, in which a WordPress plugin was abusing the 404 rewrite rules and…
Brute Force Attacks and Their Consequences
There is a lot of interesting discussion across the interwebs on the intention of the latest string of brute force attacks. While I can’t repudiate…
Protecting Against WordPress Brute-Force Attacks
It was not long ago that I was sitting on a call with other members of the WordPress community in which we were talking abou…
WordPress Security Presentation by Tony Perez
Tomorrow I will be flying to my hometown (Miami) to give a Website Security presentation to a bunch of enthusiastic online professionals at an event…
Drupal Core Vulnerability Released – Denial of Service – Advisory SA-CORE-2013-002
As if the week wasn’t exciting enough, Drupal has released a core vulnerability that leaves it susceptible to Denial of Service attacks. Metadata for this…
Linux Based SSHD Rootkit Floating The Interwebs
For the past couple of days we have been a lot of discussion on a number of forums about a potential kernel rootkit making its…
cPanel Inc. Server Compromised
It’s unclear on the specifics, but it appears the following letter is going out to cPanel users that have submitted a ticket in the last…
Website Malware – Fixing Joomla SPAM Hacks – Conditional Payloads
Our Senior Malware Engineer, Fioravante Cavallari, is at it again. I think he has made it his personal mission in life to expel all Joomla…
NBC Website HACKED – Be Careful Surfing
Breaking, the NBC site is currently compromised and blacklisted by Google. Anyone that visits the site (which includes any sub page) will have malicious iframes…