Ask Sucuri: How Does SiteCheck Work?
Daniel Cid Question: How does SiteCheck work? I just scanned a site that I think is compromised but the scanner is showing it as clean. Is my…
WordPress Security Hangout – Grand Rapids WP Meetup
Tony Perez Every now and then, trying to summarize a conversation doesn’t do it any justice. Here is the discussion in its entirety between Dre Armeda, Mark…
Is WordPress.com SPAM Campaign Due to Compromise?
*****Updated – 20121019***** Both Matt Mullenweg and Barry Abrahamson, System Wrangler with Automattic, have confirmed that there was not an environmental compromise and everything was…
Vote SPAM For President: New Election Tactics or Same Old Tricks?
Dre Armeda The United States presidential campaign is going full force, and it’s been a doozy. We don’t typically get involved with political situations, short of cleaning…
Dealing with WordPress Malware
A few months back I contributed to a post with Smashing Magazine on the top 4 WordPress Infections, it was released yesterday, and it couldn’t…
WordPress Themes: XSS Vulnerabilities and Secure Coding Practices
As many might imagine, my life revolves around Information Security. If you’re like me, you’re undoubtedly seeing all these new posts talking to insecurities in…
Sorryforthiscode – iFrame Injection
We were working on a compromised site today that had some hidden iFrames on it. The iFrames were redirecting visitors to what seemed like random…
Careful With Fake jQuery Website – jquery-framework. com
A few days ago we posted in our Labs notes about a Fake jQuery website that is distributing malware. The domain was properly chosen to…
Joomla 2.5.7 Released (Security Update)
David Dede Joomla 2.5.7 was just released today fixing 2 low severity security bugs and added a few other improvements. As always, we recommend all our Joomla…
Compromised Websites Hosting Calls to Java Exploit
Remember that Java 0 day vulnerability that was discovered a few weeks ago and took a while to get patched by Oracle? You know, the…
WooThemes Security Audit Process & Development Partner WebDevStudios
WooThemes recently released a post talking to an audit that was performed on their various plugins and framework by our team. While true, it is…