Security Advisory: Object Injection Vulnerability in WooCommerce
Marc-Alexandre Montpas During a routine audit for our WAF, we discovered a dangerous Object Injection vulnerability in WooCommerce which could, in certain contexts, be used by an…
Browsing Category
Security Education
695 posts
Your Website’s Been Hacked But No Signs of Infection
Tony Perez Imagine for a moment you suspect that your website has been hacked. Something is off, but you feel as if you are missing what that…
Website Security: How Do Websites Get Hacked?
In 2014, the total number of websites on the internet reached 1 billion. Today it’s hovering somewhere in the neighborhood of 944 million due to…
How Social Media Blacklisting Happens
Val Vesa In today’s world, we are all browsing websites online and sharing content on a multitude of social media platforms every day. Worldwide social media users…
Critical Microsoft IIS Vulnerability Leads to RCE (MS15-034)
Rafael Capovilla Microsoft just disclosed a serious vulnerability (MS15-034) on their Web Server IIS that allows for remote and unauthenticated Denial of Service (DoS) and/or Remote Code Execution…
How To Create a Website Backup Strategy
Keir Desailly We’ve all heard it a million times before – backups are important. Still, the reality is that even today, a website backup strategy remains one…
Intro to E-Commerce and PCI Compliance – Part I
Daniel Cid Update: Read our new PCI Compliance guide. Have you ever heard of the term PCI? Specifically, PCI compliance? If you have an ecommerce website you…
Why Website Reinfections Happen
I joined Sucuri a little over a month ago. My job is actually the Social Media Specialist, but we have this process where regardless of…
The Impacts of a Hacked Website
Today, with the proliferation of open-source technologies like WordPress, Joomla and other Content Management Systems (CMS) people around the world are able to quickly establish…
Understanding WordPress Plugin Vulnerabilities
When WordPress vulnerabilities are disclosed in plugins, there are often many questions. Some are minor issues, some are more relevant, while others are what we’d…
Why A Free Obfuscator Is Not Always Free.
Peter Gramantik We all love our code but some of us love it so much that we don’t want anyone else to read or understand it. When…