What is the Status of IPv6 Adoption?
Daniel Cid The internet is a complex ecosystem of interconnected devices, and at its core is the Internet Protocol (IP). This protocol is currently in its second…
Malicious Pop-ups in vBulletin
Fernando Barbosa Pop-up ads are annoying. Unfortunately many sites rely on them to pay for their operational expenses and even to make some extra cash. However when…
Hacked Website Report – 2016/Q2
Today we’re releasing our quarterly Hacked Website Report for 2016/Q2. The data in this report is based on compromised websites we worked on, with insights…
Hijacking PayPal Donations
Denis Sinegubko Recently we wrote about how hackers hijacked payment process on an ecommerce site and redirected customers to a fake checkout page on a third-party site.…
Hacking WordPress Sites on Shared Servers
A website is only as safe as the weakest link on its shared server. Once a hacker gains access to one site on the server,…
New Guide on How to Fix Hacked WordPress Sites
Alycia Mitchell Our involvement in WordPress security has always been a core part of our mission here at Sucuri. We have teams who actively lend advice on…
Product Update: Sucuri Firewall in Tokyo, Japan
For the last couple of years, we have been transitioning the Sucuri Firewall (WAF) away from the cloud and expanding it to run on top…
Drupal Database WebShell
Bruno Zanelato Some people are unfamiliar with the Drupal CMS, it doesn’t enjoy the popularity that some others do like WordPress and Joomla, but it’s a powerful…
Spotlight: Protecting Brand Reputation with Melbourne SEO and Video
One of our very first case studies came to us from David Jenyns, founder of Melbourne SEO Services and Melbourne Video Production. His team creates…
Cleaning the Wp-Page Pharma Hack in WordPress
Tony Perez Pharma hacks are common website infections categorized under SEO spam. With pharma hacks, the attacker exploits vulnerable websites to distribute pharmaceutical content to search engines…
IoT Home Router Botnet Leveraged in Large DDoS Attack
We have been monitoring a large-scale Layer 7 HTTPS flood attack (i.e., application level DDoS) against a customer over the past few weeks. It is…