The Dangers External Services Present To Your Website
Tony Perez Today the Washington Post reported that they were victims of hack, orchestrated by the Syrian Electronic Army. This attack is interesting because it sheds light…
Browsing Category
Security Education
679 posts
New WordPress and Joomla Updates Available
David Dede If you are a WordPress or Joomla user, you better start updating your sites now. Joomla 2.5.14 Joomla 2.5.14 was released containing some critical security…
Sucuri CloudProxy Web Application Firewall (WAF) – Out of Beta
Daniel Cid We are happy to announce that after more than a year in testing, Sucuri’s Cloud WAF is out of beta. CloudProxy is currently available to…
Dissecting a WordPress Brute Force Attack
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
From a Site Compromise to Full Root Access – Bad Server Management – Part III
When an attacker manages to compromise and get access to a website, they won’t stop there. They will aim to gain full root (admin) access…
Google Transparency Report – Malware Distribution
Google just released their Malware Distribution Transparency Report, sharing the amount of sites compromised or distributing malware detected by their systems (Safe Browsing program). Google’s…
From a Site Compromise to Full Root Access – Local Root Exploits – Part II
When an attacker manages to compromise and get access to a website, they won’t likely stop there, they will aim to gain full root (admin)…
From a Site Compromise to Full Root Access – Symlinks to Root – Part I
When an attacker manages to compromise and get access to a website, they won’t likely stop there, they will aim to gain full root (admin)…
Sucuri CloudProxy WAF – Fake Bots Explained
One of the most common questions we have been getting since launching our CloudProxy WAF is regarding bot activity and why it appears that we…
Malaysian Election and DDOS
Malaysia is having an election this weekend that has been surrounded by issues. We won’t go into the politics, but one of our client’s sites…
W3 Total Cache and WP Super Cache Vulnerability Being Targeted in the Wild
As if on queue, almost 7 days since we released the post about the latest W3TC and WP Super Cache remote command execution vulnerability, we…