WHMCS SQL Injection Vulnerability in the Wild
Daniel Cid A few days ago, a zero-day SQL injection vulnerability in WHMCS was disclosed by localhost.re, along with the exploit code. It was quickly patched by…
Browsing Category
Security Education
694 posts
CloudProxy WAF – September Report
*By Tony Perez and Daniel Cid As many of you are aware we released a website protection tool, CloudProxy WAF/IDS, at the beginning of the…
Ask Sucuri: Non-Alphanumeric Backdoors
If you have any questions about malware, blacklisting, or security in general, send them to contact@sucuri.net and we will write a post about it and…
Big Increase in Distributed Brute Force Attacks Against Joomla Websites
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection A few months ago, we discussed and published details about a very large brute force attack targeting WordPress…
The Dangers External Services Present To Your Website
Tony Perez Today the Washington Post reported that they were victims of hack, orchestrated by the Syrian Electronic Army. This attack is interesting because it sheds light…
New WordPress and Joomla Updates Available
David Dede If you are a WordPress or Joomla user, you better start updating your sites now. Joomla 2.5.14 Joomla 2.5.14 was released containing some critical security…
Sucuri CloudProxy Web Application Firewall (WAF) – Out of Beta
We are happy to announce that after more than a year in testing, Sucuri’s Cloud WAF is out of beta. CloudProxy is currently available to…
Dissecting a WordPress Brute Force Attack
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection Over the past few months there has been a lot of discussion about WordPress Brute Force attacks. With…
From a Site Compromise to Full Root Access – Bad Server Management – Part III
When an attacker manages to compromise and get access to a website, they won’t stop there. They will aim to gain full root (admin) access…
Google Transparency Report – Malware Distribution
Google just released their Malware Distribution Transparency Report, sharing the amount of sites compromised or distributing malware detected by their systems (Safe Browsing program). Google’s…
From a Site Compromise to Full Root Access – Local Root Exploits – Part II
When an attacker manages to compromise and get access to a website, they won’t likely stop there, they will aim to gain full root (admin)…