FBI Public Service Annoucement: Defacements Exploiting WordPress Vulnerabilities
Daniel Cid The US Federal Bureau of Investigation (FBI) just released a public service announcement (PSA) to the public about a large number of websites being exploited…
Security Advisory: Persistent XSS in WP-Super-Cache
Marc-Alexandre Montpas During a routine audit for our Website Firewall (WAF), we discovered a dangerous persistent XSS vulnerability affecting the very popular WP-Super-Cache plugin (more than a…
Website Malware – The SWF iFrame Injector Evolves
Peter Gramantik Last year, we released a post about a malware injector found in an Adobe Flash (.swf) file. In that post, we showed how a SWF…
Intro to E-Commerce and PCI Compliance – Part I
Update: Read our new PCI Compliance guide. Have you ever heard of the term PCI? Specifically, PCI compliance? If you have an ecommerce website you…
WordPress Malware Causes Psuedo-Darkleech Infection
Denis Sinegubko Darkleech is a nasty malware infection that infects web servers at the root level. It use malicious Apache modules to insert hidden iframes with certain…
Why Website Reinfections Happen
Val Vesa I joined Sucuri a little over a month ago. My job is actually the Social Media Specialist, but we have this process where regardless of…
The Impacts of a Hacked Website
Tony Perez Today, with the proliferation of open-source technologies like WordPress, Joomla and other Content Management Systems (CMS) people around the world are able to quickly establish…
Understanding WordPress Plugin Vulnerabilities
When WordPress vulnerabilities are disclosed in plugins, there are often many questions. Some are minor issues, some are more relevant, while others are what we’d…
Inverted WordPress Trojan
A trojan (or trojan horse) is software that does (or pretends to be doing) something useful but also contains a secret malicious payload that inconspicuously…
Security Advisory: MainWP-Child WordPress Plugin
Mickael Nadeau During a routine audit of our Website Firewall (WAF), we found a critical vulnerability affecting the popular MainWP Child WordPress plugin. According to WordPress.org, it…
Why A Free Obfuscator Is Not Always Free.
We all love our code but some of us love it so much that we don’t want anyone else to read or understand it. When…