Bash Vulnerability – Shell Shock – Thousands of cPanel Sites are High Risk
Daniel Cid The team behind the Bash project (the most common shell used on Linux) recently issued a patch for a serious vulnerability that could allow for…
Browsing Category
Website Security
1031 posts
Security Advisory – Hikashop Extension for Joomla!
Marc-Alexandre Montpas In a routine audit of our Website Firewall we discovered a serious vulnerability within the Hikashop ecommerce product for Joomla! allowing remote code execution on…
Website Security – Compromised Website Used To Hack Home Routers
Fioravante Souza What if we told you that a compromised website has the ability to hack your home router? Yesterday we were notified that a popular newspaper…
Microsoft IIS Web Server – CMD Process Contributing to Website Reinfections
We often spend a lot of time talking about application level malware, but from time to time we do like to dabble in the ever…
Backups – The Forgotten Website Security Pillar
Tony Perez I travel a lot (might actually be an understatement these days), but the travel always revolves around a couple of common threads – website security…
Responsible Disclosure – Sucuri Open Letter to MailPoet and Future Disclosures
Many don’t know who I am. My name is Tony Perez, I’m the CEO of Sucuri. I have the pleasure of calling this company my…
Website Malware – Mobile Redirect to BaDoink Porn App
A few weeks ago we reported that we were seeing a huge increase in the number of websites compromised with a hidden redirection to pornographic…
Simplifying the Language of Website Security
David Dede A couple of weeks ago, the Sucuri team was at HostingCon. We rubbed elbows with the people who bring your websites to the world and…
Serious Cross Site Scripting Vulnerability in TweetDeck – Twitter
This morning as I was logging into various social networks I was presented with a popup from an XSS on Tweet Deck. This obviously set…
Website Firewall Update – Introducing 2FA and More
Today we are launching the new and improved Protected Page capability in our Website Firewall. It allows for a simple (1-click) activation of secondary authentication…
Take Back Your Internet – Demand a Safer Web
Over the last couple of weeks, we’ve written about malicious redirects pushing users to porn sites, ever more complicated phishing scams being carried out by…