WPScan Intro: WordPress Vulnerability Scanner
Alycia Mitchell Have you ever wanted to run security tests on your WordPress website to see if it could be easily hacked? WPScan is a black box…
Joomla SQL Injection Attacks in the Wild
Daniel Cid Nov 2016 Update: We released a new free guide to help you identify and remove Joomla hacks. Read the Guide! Last week, the Joomla team…
Joomla 3.4.5 Released, Fixing a Serious SQL Injection Vulnerability
The Joomla team just released a new Joomla version (3.4.5) to fix some serious security vulnerabilities. The most critical one is a remote and unauthenticated…
Massive Magento Guruincsite Infection
Denis Sinegubko We are currently seeing a massive attack on Magento sites where hackers inject malicious scripts that create iframes from “guruincsite[.]com“. Google already blacklisted about seven thousand sites because…
Security Advisory: Stored XSS in Akismet WordPress Plugin
Marc-Alexandre Montpas During a routine audit for our WAF, we discovered a critical stored XSS vulnerability affecting Akismet, a popular WordPress plugin deployed by millions of installs.
Redirect to Microsoft Word Macro Virus
These days we rarely see Microsoft Word malware on websites, but it still exists and compromised websites can distribute this kind of malware as well. It’s…
vBulletin Still Redirecting to Myfilestore.com
Fernando Barbosa MyFileStore[.]com redirects from vBulletin sites have been a problem since 2011. It is associated with the VBSEO plugin with multiple unpatched vulnerabilities that has been…
Magento Malware Emails Stolen Credit Card Details to Hackers
Cesar Anjos We regularly find malware that tries to steal client credit card details from Magento sites. Hackers use a few tricks and slightly modify their code…
Brute Force Amplification Attacks Against WordPress XMLRPC
Brute force attacks are one of the oldest and most common types of attacks that we still see on the Internet today. If you have…
Phishing for Anonymous Alligators
Everyone has encountered phishing at some point – fake emails and web pages designed to look legitimate. This tactic is becoming more popular as attackers…
Malware in comments
There are many tricks to hide malicious code. One of them is placing it to the part of legitimate files where people don’t normally expect…