WordPress 3.6.1 Released – Includes Security Fixes
Dre Armeda The WordPress team just pushed out a new version of WordPress. WordPress 3.6.1 is a maintenance release that includes some security bug fixes. Straight from…
Security Archive – Case Study: phpbb.com Compromised
Daniel Cid Security Archive: It is important to remember past security incidents to make sure we don’t commit the same mistakes over and over again. The idea…
Over 10% of Alexa TOP Million Websites Found Not Safe – Infographic Report
We scan a lot of websites per day. Through our daily work we see all sizes and types of websites compromised, blacklisted, and filled with…
Big Increase in Distributed Brute Force Attacks Against Joomla Websites
Update: Brute force protection now available: http://cloudproxy.sucuri.net/brute-force-protection A few months ago, we discussed and published details about a very large brute force attack targeting WordPress…
Potential vBulletin Exploit (4.1+ and 5+)
The vBulletin team just posted a pre-disclosure warning on their announcements forum about a possible exploit in versions 4.1+ and 5+ of vBulletin. They don’t…
Free Sucuri WordPress Plugin Gets New Features
We just released some major updates to our Free WordPress plugin that we recommend all WordPress users check out. Before the update, the plugin was…
Joomla Media Manager Attacks in the Wild
If you are using Joomla and didn’t update your site recently, you better stop doing whatever you are doing, and update it now. There is…
The Dangers External Services Present To Your Website
Tony Perez Today the Washington Post reported that they were victims of hack, orchestrated by the Syrian Electronic Army. This attack is interesting because it sheds light…
Joomla Hacks – Part I – Phishing
Joomla is a very popular open source CMS, dominating approximately 10% of the website market. While great for them, horrible for many others, as being…
Open Source Backdoor – Copyrighted Under GNU GPL
Rodrigo Escobar Malware code can be very small, and the impact can be very severe! In our daily tasks we find a lot of web-based malware that…
OpenX.org Compromised and Downloads Injected with a Backdoor
We received reports that OpenX.org was compromised and the OpenX download files had a backdoor injected in them. According to Heise (in German), the malicious…