Security Exploit Patched on vBulletin – PHP Object Injection
Daniel Cid The vBulletin team just issued a warning, and released patches for a security exploit that affected all versions of vBulletin including 3.5, 3.6, 3.7, 3.8,…
Understanding Denial of Service and Brute Force Attacks – WordPress, Joomla, Drupal, vBulletin
Tony Perez Many are likely getting emails with the following subject header: Large Distributed Brute Force WordPress Attack Underway – 40,000 Attacks Per Minute. Just this week…
More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack
Distributed Denial of Service (DDoS) attacks are becoming a common trend on our blog lately, and that’s okay because it’s a very serious issue for…
Joomla Security Updates – Version 2.5.19 and 3.2.3 Released
The Joomla team just released two security updates and pushed out the stable versions for Joomla 2.5.19 and 3.2.3. If you run your site on…
Fake botsvsbrowsers domain
The domain botsvsbrowsers.com is quite popular and used for comparing user agents (browsers) and seeingif a specific request is from a valid user or a…
Highly Effective Joomla Backdoor with Small Profile
Fioravante Souza It feels like every day we’re finding gems, or what appear to be gems to us. We try to balance the use of the term,…
Sucuri CloudProxy Website Firewall Improvements
If you are are a regular reader of our blog you probably know about our CloudProxy Website Firewall, it launched publicly a year ago. Since…
SiteCheck Chrome Extension Now Available
Have you ever wondered if the websites you (or your family) visit contain code that is potentially harmful to you or your computer? If you…
Malicious iFrame Injections Host Payload on Tumblr
It’s always fun to watch malware developers using different techniques to code their creations. Sometimes it’s a matter of obfuscation, placement, injection, but this time…
PHP Backdoors: Hidden With Clever Use of Extract Function
When a site gets compromised, one thing we know for sure is that attackers love to leave malware that allows them access back into the…
Mysterious Zencart Redirects Leverage HTTP Headers
Denis Sinegubko About a week ago we got an interesting Zencart case. Being that we don’t often write about Zencart we figured it’d be good time to…