WordPress Security Release – Upgrade to 3.3.2 TODAY
Dre Armeda It’s that time again, to upgrade all your WordPress installs. This morning the core team released WordPress 3.3.2 which includes security updates for three external…
Nikjju Mass injection campaign (180k+ pages compromised)
Daniel Cid Our research team have been tracking a new mass SQL injection campaign that started early this month. So far more than 180,000 URLs have been…
GetMama – Conditional malware affecting thousands of sites
We have been tracking an interesting malware that is affecting thousands of compromised sites. We call it GetMama!! Why conditional? Because instead of just displaying…
Joomla updates (1.5.26 and 2.5.4)
David Dede If you are using Joomla, now is a good time to check if your sites are updated. Some (high severity) vulnerabilities were fixed in the…
Sucuri SiteCheck – Web Malware Distribution – March 2012
Tony Perez Apologies for not posting stats for February. We were making some internal changes which delayed the process and skewed the data. Regardless, here are the…
e107 Being Exploited – Vulnerable contact.php Scanned and Attacked
We are seeing an old vulnerability on e107 being widely scanned and exploited. e107 is a free open source content management system (CMS). More details…
Varying Degrees of Malware Injections Decoded
Rodrigo Escobar It is no longer the day of human-readable injections, or even the use of basic encoding schemes like base64. Instead we’re seeing a rise in…
Website Cross-contamination: Blackhat SEO Spam Malware
We recently posted about Website Cross-Contamination which we see quite a bit of in shared hosting environments. This post is a follow up with a…
WordPress Third Party Vulnerability – Deans FCKEditor with PWWANGS Code for WordPress(version 1.0.0)
You have heard me write in the past about understanding the true Vulnerability within WordPress. In that post I talk to the benefits of the…
Intelligent (Pharma) Spam Decoded
We are seeing a rise in the use of intelligent SPAM – a.k.a Pharma Hack – across a number of platforms. We recently found a…
WordPress – Understanding its True Vulnerability
Everyday we manage thousands of clients running a wide range of applications, built across a number of different platforms. It should be of no surprise…