Fan of Twilight? Be Very Careful If You’re Looking Online For It
David Dede If you like the Twilight series, be careful if you plan to do any “research” on it, or if you plan to visit the site…
ASK Sucuri: What should I do if my email is in the Yahoo Leak?
Daniel Cid We love to get questions from you, our readers, in our Ask Sucuri series. If you have any questions about website malware, blacklisting, or security…
Analysis of Yahoo Voice Password Leak – 453,441 Passwords Exposed
We recently heard that a massive leak of Yahoo passwords has been floating on the interwebs for a few days. According to Ars Technica, the…
Magento Security Update (1.7.0.2) – Zend_XmlRpc Vulnerability
A few days ago, Magento 1.7.0.2 was released to fix a very serious security vulnerability that allows attackers to read any file on the web…
Distributed Malware Network Outbreak Using Stats.php
We are seeing a large and distributed malware network comprised of thousands of infected websites that is growing very quickly. We call it “Stats.php” because…
Google Blacklist Warning: Something’s Not Right Here!
Tony Perez Google recently put out a post talking to the past 5 years offering the Safe Browsing program and summarized in a post titled: Google Safe…
Malware That Pretends To Be Google
Malware authors (AKA the criminals or the bad guys), use many advanced techniques to hide their activities. From encoding, to encrypting, to auto-generated random domains,…
Microsoft XML Core Service Zero Day Vulnerability Being Targeted
On June 12th we reported the release of a new Microsoft Security Advisory. It was of specific interest to us as it was exploitable via…
WordPress Update – 3.3.3 and 3.4.1 Patches Released!!
Well it was only a few weeks ago, but today, two new patches were released: 3.3.3 and 3.4.1. The good news is, as they are…
Uploadify, Uploadify and Uploadify – The New TimThumb?
We are seeing a lot of noise again regarding the Uploadify script vulnerabilities affecting some WordPress themes/plugins. If you are not familiar, Uploadify allows anyone…
Plesk Vulnerability Leading to Malware
Our friends over at Unmask Parasites posted two very good reports about a mix of Plesk vulnerabilities being used to mass-compromise websites, and redirecting them…