WordPress Security News & Updates

From Google DNS to Tech Support Scam Sites: Unmasking the Malware Trail

Denis Sinegubko
August 10, 2023

A vast majority of website malware employ the ever-familiar HTTP/HTTPS protocols for its malicious activities. But, we also periodically confront more interesting hybrid malware leveraging…

Read the Post

WordPress Vulnerability & Patch Roundup July 2023

Cesar Anjos
July 28, 2023

Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes…

Read the Post

Malicious Injection Redirects Traffic to Parked Domain for Ad Monetization

Malicious Injection Redirects Traffic via Parked Domain

Puja Srivastava
July 13, 2023

During a recent investigation, our malware remediation team encountered a variant of a common malware injection that has been active since at least 2017. The…

Read the Post

How to Harden WordPress: A Basic Overview

Ben Martin
July 12, 2023

Out-of-the-box security configurations tend to not be very secure. This is usually true for all software and WordPress is no exception. Best practices suggest you…

Read the Post

New Guide on Secure VPS Configuration

Ben Martin
July 4, 2023

One of the most common problems that we observe among many of our clients is the persistent threat of cross contamination – that is, malware…

Read the Post

Tips for WP-CONFIG to avoid sensitive data exposure

How to Harden WordPress With WP-Config & Avoid Data Exposure

Luke Leal
July 3, 2023

What is wp-config.php? The wp-config.php file is a powerful core WordPress file that is vital for running your website. It contains important configuration settings for…

Read the Post

WordPress Plugin & Theme Vulnerability & Patch Roundup June 2023

WordPress Vulnerability & Patch Roundup June 2023

Cesar Anjos
June 27, 2023

Read the Post

Remote Code Execution Backdoor Uses Unicode Obfuscation and Non-Standard File Extensions

Remote Code Execution Backdoor Uses Unicode Obfuscation & Non-Standard File Extensions

Ben Martin
June 22, 2023

Readers of this blog will know that attackers are constantly finding new ways to hide their malware and avoid detection; after all, that’s what good…

Read the Post

New WooCommerce Security Best Practices Guide

Rianna MacLeod
June 20, 2023

WooCommerce is a widely used e-commerce platform, powering nearly 6 million online stores worldwide. Its popularity makes it a prime target for cybercriminals looking to…

Read the Post

What are WordPress salts and security keys?

How to Generate WordPress Salts & Security Keys: Step by Step Instructions

Kaushal Bhavsar
June 13, 2023

In the realm of WordPress security, there’s a powerful tag team working tirelessly behind the scenes to safeguard your website’s login process. Meet salts and…

Read the Post

WP-CLI: How to Connect to WordPress via SSH

How to Update, Install & Remove WordPress Plugins & Themes With WP-CLI

Rianna MacLeod
June 1, 2023

WordPress, like other open-source content management systems, allows you to enhance your website’s appearance and functionality through custom code and third-party components like plugins and…

Read the Post