The WordPress Security Plugin Ecosystem
Tony Perez As a child, did you ever play that game where you sit in a circle and one person is responsible for whispering something into one…
Browsing Category
Security Education
681 posts
Anatomy of 2,000 Compromised Web Servers used in DDoS Attack
Daniel Cid One of our clients was being attacked by a layer-7 DDoS attack for more than a week. The attack was generating around 5,000 HTTP requests…
Quick Analysis of a DDoS Attack Using SSDP
Rodrigo Montoro Last week, one of our many clients came under an interesting attack. Enough that it was flagged for human intervention. The interesting aspect of the…
My WordPress Website Was Hacked
Before you freak out, allow me to clarify. It was one of several honeypots we have running. The honeypots are spread across the most commonly…
Thoughts on WordPress Security and Vulnerabilities
David Dede As avid readers of this blog know, we’ve discovered or written about multiple vulnerabilities within the WordPress ecosystem over the last couple of weeks specifically…
Yoast and Sucuri Partner to Create a Safer Web
We’re very excited to finally talk about a partnership that’s been in the works for a few months and in light of the serious nature…
Backups – The Forgotten Website Security Pillar
I travel a lot (might actually be an understatement these days), but the travel always revolves around a couple of common threads – website security…
Responsible Disclosure – Sucuri Open Letter to MailPoet and Future Disclosures
Many don’t know who I am. My name is Tony Perez, I’m the CEO of Sucuri. I have the pleasure of calling this company my…
New Brute Force Attacks Exploiting XMLRPC in WordPress
Brute force attacks against WordPress have always been very common. In fact, Brute Force attacks against any CMS these days is a common occurrence, what…
Simplifying the Language of Website Security
A couple of weeks ago, the Sucuri team was at HostingCon. We rubbed elbows with the people who bring your websites to the world and…
Ask Sucuri: Who is Logging into My WordPress Site?
Today, we’re going to revisit our Q&A series. If you have any questions about malware, blacklisting, or security in general, send them to us at:…