Vulnerability Disclosed in SSL 3.0 – This Poodle Bites
Joseph Herbrandson It seems that SSL just cannot stay out of the news. Another vulnerability, this time in SSL 3.0, has been disclosed at the Google Online…
Browsing Category
Security Education
695 posts
Website Attacks – SQL Injection And The Threat They Present
Daniel Cid We are starting a new series of articles where we will talk about different active website attacks we are seeing. The first one we will…
Bash – ShellShocker – Attacks Increase in the Wild – Day 1
The Bash ShellShocker vulnerability was first disclosed to the public yesterday. Just a few hours after the initial release, we started to see a few…
The WordPress Security Plugin Ecosystem
Tony Perez As a child, did you ever play that game where you sit in a circle and one person is responsible for whispering something into one…
Anatomy of 2,000 Compromised Web Servers used in DDoS Attack
One of our clients was being attacked by a layer-7 DDoS attack for more than a week. The attack was generating around 5,000 HTTP requests…
Quick Analysis of a DDoS Attack Using SSDP
Rodrigo Montoro Last week, one of our many clients came under an interesting attack. Enough that it was flagged for human intervention. The interesting aspect of the…
My WordPress Website Was Hacked
Before you freak out, allow me to clarify. It was one of several honeypots we have running. The honeypots are spread across the most commonly…
Thoughts on WordPress Security and Vulnerabilities
David Dede As avid readers of this blog know, we’ve discovered or written about multiple vulnerabilities within the WordPress ecosystem over the last couple of weeks specifically…
Yoast and Sucuri Partner to Create a Safer Web
We’re very excited to finally talk about a partnership that’s been in the works for a few months and in light of the serious nature…
Backups – The Forgotten Website Security Pillar
I travel a lot (might actually be an understatement these days), but the travel always revolves around a couple of common threads – website security…
Responsible Disclosure – Sucuri Open Letter to MailPoet and Future Disclosures
Many don’t know who I am. My name is Tony Perez, I’m the CEO of Sucuri. I have the pleasure of calling this company my…