Sorryforthiscode – iFrame Injection
Daniel Cid We were working on a compromised site today that had some hidden iFrames on it. The iFrames were redirecting visitors to what seemed like random…
Careful With Fake jQuery Website – jquery-framework. com
A few days ago we posted in our Labs notes about a Fake jQuery website that is distributing malware. The domain was properly chosen to…
Joomla 2.5.7 Released (Security Update)
David Dede Joomla 2.5.7 was just released today fixing 2 low severity security bugs and added a few other improvements. As always, we recommend all our Joomla…
Compromised Websites Hosting Calls to Java Exploit
Remember that Java 0 day vulnerability that was discovered a few weeks ago and took a while to get patched by Oracle? You know, the…
WooThemes Security Audit Process & Development Partner WebDevStudios
Tony Perez WooThemes recently released a post talking to an audit that was performed on their various plugins and framework by our team. While true, it is…
Sociable WordPress Plugin Security Warning
If you are using the Sociable WordPress Plugin (plugin with 1,777,161 downloads), be very careful when visiting the plugin’s page settings. We recommend that you…
WordPress 3.4.2 Released – Maintenance and Security Update!
As many know, today the WordPress team released a new patch for WordPress 3.4.2, and have titled it a maintenance and security release. By now…
Network Outage
UPDATE: Issue has been resolved. Please see timeline below for details. One of the data centers we currently use is experiencing an unusual network level…
WordPress Security – Cutting Through The BS
Update 9/9/16: We released a new guide that provides better instructions on how to clean a hacked WordPress site using the Free WordPress security plugin.…
The Password Dilemma – Unique and Complex is the Key
A lot of attention is being applied to passwords lately, and rightfully so. Most everyone is trying to understand how easy or hard reverse engineering…
Java Zero-Day In The Wild
A Java Zero-Day vulnerability was disclosed today, and its being distributed through the use of websites. If you visit an infected site you’ll see something…