Dre Armeda Presenting on WordPress Security at WordCamp Phoenix 2013
Dre Armeda Here is the video for the WordPress Security presentation at WordCamp Phoenix 2013: Here is the slide deck from the presentation: Leave us your comments…
Twitter Suffers Compromise – Enterprise Attacks Continue
Tony Perez Looks like Twitter is the latest to get bit in the butt. They just put out the following on their blog: This week, we detected…
Web Server Attacks – Apache Modules, Log Management and RELM
New year, same tricks, mostly because they work. That’s how we’re kicking off the new year folks. In September of 2012, Dennis, of Unmask Parasites,…
WordPress Security: 5 Steps To Reduce Your Risk
Update 11/3/2017: Check out our latest WordPress Security Guide for best practices to keep your website protected and learn about vulnerabilities. Often you hear the…
WordPress 3.5.1 Released
Daniel Cid The WordPress team just pushed out a new version of WordPress (3.5.1) that has some security bugs fixed. Straight from their release post, these are…
Server Compromises – Understanding Apache Module iFrame Injections and Secure Shell Backdoor
There are many ways to inject a malicious payload onto a website. The attacker can modify any of the web files (index.php for example), the…
Website Security – The Importance of Access
I’m not sure why more emphasis isn’t put on access in website security discussions, but I’ll spend some time on it today. Understand that this…
WordPress SPAM Causing Headaches
Newly Released: On 11/3/2017 we published our guide on how to secure your WordPress site and it also talks about vulnerabilities and best practices. It…
WordCamp Las Vegas 2012 – Tony Perez: WordPress Security – Dealing with Today’s Hacks
Here is a great presentation given by Tony Perez our COO in October of 2012 at WordCamp Las Vegas:
Ruby on Rails Vulnerability Leads to Remote Command Execution on Servers
As always, the year is kicking off with a bang. This is a public service announcement to get the word out on a very serious…
W3 Total Cache Implementation Vulnerability
Just in time for Christmas, it was announced on the full disclosure list a security (configuration/implementation) bug on W3 Total cache (W3TC), one of the…