Intro to E-Commerce and PCI Compliance – Part I
Daniel Cid Update: Read our new PCI Compliance guide. Have you ever heard of the term PCI? Specifically, PCI compliance? If you have an ecommerce website you…
Browsing Category
Website Security
1051 posts
WordPress Malware Causes Psuedo-Darkleech Infection
Denis Sinegubko Darkleech is a nasty malware infection that infects web servers at the root level. It use malicious Apache modules to insert hidden iframes with certain…
Why Website Reinfections Happen
Val Vesa I joined Sucuri a little over a month ago. My job is actually the Social Media Specialist, but we have this process where regardless of…
The Impacts of a Hacked Website
Tony Perez Today, with the proliferation of open-source technologies like WordPress, Joomla and other Content Management Systems (CMS) people around the world are able to quickly establish…
Why A Free Obfuscator Is Not Always Free.
Peter Gramantik We all love our code but some of us love it so much that we don’t want anyone else to read or understand it. When…
Why Websites Get Hacked
I spend a good amount of time engaging with website owners across a broad spectrum of businesses. Interestingly enough, unless I’m talking large enterprise, there…
Vulnerability Disclosures – A Note To Developers
This post is entirely for developers. Feel free to read, but approach it with that in mind. There is no such thing as bug-free code.…
From Guessing to Phishing: The Dynamics of Password Security
Sucuri Password security was once just a small hassle. Now, they’re the main defense for bank accounts, cloud tools, customer data, and businesses. Attackers use automation…
Analyzing Malicious Redirects in the IP.Board CMS
Although the majority of our posts describe WordPress and Joomla attacks (no wonder, given their market-share), there are still attacks that target smaller CMS’s and…
Creative Evasion Technique Against Website Firewalls
Lee Howarth During one of our recent in-house Capture The Flag (CTF) events, I was playing with the idea of what could be done with Non-Breaking Spaces.…
Bogus Mobile-Shortcuts WordPress Plugin Injects SEO Spam
Ben Martin Here at Sucuri we see countless cases of SEO spam where a website is compromised in order to spread pharmaceutical advertisements or backlinks to sites…