Server Compromises – Understanding Apache Module iFrame Injections and Secure Shell Backdoor
Daniel Cid There are many ways to inject a malicious payload onto a website. The attacker can modify any of the web files (index.php for example), the…
Browsing Category
Security Education
694 posts
Website Security – The Importance of Access
Tony Perez I’m not sure why more emphasis isn’t put on access in website security discussions, but I’ll spend some time on it today. Understand that this…
WordPress SPAM Causing Headaches
Newly Released: On 11/3/2017 we published our guide on how to secure your WordPress site and it also talks about vulnerabilities and best practices. It…
Ruby on Rails Vulnerability Leads to Remote Command Execution on Servers
As always, the year is kicking off with a bang. This is a public service announcement to get the word out on a very serious…
Website Malware – Drupal Injections Targeting Cookies
Many folks are unfamiliar with the Drupal CMS, it doesn’t enjoy the popularity that some others do like WordPress and Joomla, but its a powerful…
Website Malware – Sharp Increase in SPAM Attacks – WordPress & Joomla
This past week we have seen a sharp increase in the use of old tactics designed to poison your search engine results – also known…
Website Malware – Reality of Cross-Site Contaminations
Sometimes you can’t help but put yourself in the shoes of your clients and skeptics and wonder how many times they roll their eyes at…
Sucuri Launches Rapid+ Monitoring
A common feature our clients have been asking us for a long time is the ability to monitor their sites more frequently. For some high…
PSA: December Zero Day’s Announced – MySQL, FreeSSH, Free FTPD
So it looks like we’re closing out the year in style in 2012. This weekend a number of new, very serious, zero-day vulnerabilities were released…
Website Malware – Joomla SEP Attack – Pharma Injection
This was a fun, yet painful case. In the past we have written a few different posts targeting search engine poisoning attacks (SEP) that like…
Website Malware Removal – FTP Tips & Tricks
Update 9/9/16: We released a new guide that provides better instructions on how to clean a hacked WordPress site using the Free WordPress security plugin.…