SFTP/FTP Password Exposure via sftp-config.json
Daniel Cid Have you heard of the file sftp-config.json? You haven’t? Neither did we until a few weeks ago. It is used by some SFTP/FTP clients (Sublime…
Browsing Category
Security Education
694 posts
Website Malware – SEP Attack – SPAM Link Farm
Tony Perez How appropriate that less than a few hours from my last post talking about Search Engine Poisoning (SEP) attacks I come across a case that…
PSA: Skype Vulnerability Released
While not exactly related to web security, it’s always good to take a minute to look at the web’s cousin, the desktop. On November 13th…
New Google Chrome Blacklist Warning for Macs
David Dede If you go to a site that is Blacklisted by Google, you will see a new (and prettier) malware warning now if you are using…
Out-of-date Software Affects Websites Big and Small
Last week we published an article listing some big and popular websites that were leaking information about their users via the Apache server-status page. We…
Popular sites with Apache server-status enabled
Apache has a very useful functionality called server-status that allows administrators to easily find how well their servers are performing. It is basically an HTML…
Sucuri – Decoding Obfuscated PHP
We are happy to release a new tool for you Do It Yourself (DIY) types. Every now and then you might come across a variety…
Ask Sucuri: How Does SiteCheck Work?
Question: How does SiteCheck work? I just scanned a site that I think is compromised but the scanner is showing it as clean. Is my…
Dealing with WordPress Malware
A few months back I contributed to a post with Smashing Magazine on the top 4 WordPress Infections, it was released yesterday, and it couldn’t…
WordPress Security – Cutting Through The BS
Update 9/9/16: We released a new guide that provides better instructions on how to clean a hacked WordPress site using the Free WordPress security plugin.…
The Password Dilemma – Unique and Complex is the Key
A lot of attention is being applied to passwords lately, and rightfully so. Most everyone is trying to understand how easy or hard reverse engineering…