The Sucuri Learn Blog
Tony Perez We have long known that the time was approaching in which we would need to improve our level of engagement with the community and start…
Websites Compromised with Fake AV Campaign (Windows Web Secure Kit)
Daniel Cid “To help protect your computer, Windows Web Secure Kit have detected trojans and is ready to remove them”. We are seeing many WordPress sites compromised with a malware…
Official WordPress Plugin Directory – Forcing Plugin Updates
Dre Armeda For some while we have wondered what happens when a plugin is removed from the official WordPress plugin directory for security reasons. Historically, we haven’t…
Blog Comments – Analysing 100,000 Comments and Spammers
“Nice blog, thanks for the info” “Awesome site. Great job” “You should take part in a contest for one of the best blogs on the…
Wpstats. org Spam and a Fake Advanced Search Plugin
If you are seeing hidden links in your WordPress site, it could be coming from wpstats.org. On some blackhat spam cases we are analysing, the…
Sucuri WordPress Security Plugin Protects Against PHP-CGI Vulnerability
Today we released an update on the latest PHP CGI vulnerability and provided some additional information that users can use to help protect against it.…
PHP-CGI Vulnerability Exploited in the Wild
When the PHP-CGI vulnerability was disclosed, we knew it would be just a matter of days before it started to be exploited in the wild.…
Sucuri SiteCheck – Web Malware Distribution – April 2012
When we see a compromised site distributing malware, it is often done via 4 methods: Iframe, Javascript, Spam or internal redirections. Those are not the…
New WooThemes Vulnerability Patched – Update Framework Now!
Yesterday a vulnerability on the WooThemes Framework was disclosed by Jason Gill on githumb:gist. The vulnerability allows a visitor to see and run the output of…
Ransomware Malware on the Web?
As the week comes to a close I wanted to take a minute to talk about something we haven’t yet – Ransomware Malware. The idea…
Lockdown WordPress – A Security Webinar with Dre Armeda
We had the opportunity to do a webinar about WordPress security with the guys from iThemes yesterday. Here’s the video for those of you who…