Attacks against osCommerce sites – Spam / google_analytics_obhDavid DedeAugust 9, 2011 It seems that the attacks against osCommerce are not going to stop any time soon. With so many valuable targets (online stores) that are not… Read the Post
Mass Compromise of Sites at gogvo.com – SEO SpamDavid DedeAugust 4, 2011 A regular topic of discussion the past few months has been the basicpills link injection (a type of blackhat seo spam) on WordPress sites. If… Read the Post
Timthumb Security Vulnerability – List of ThemesDavid DedeAugust 3, 2011 The Timthumb 0-day security vulnerability is generating a lot of noise and for good reason. If you have a theme that includes TimThumb, your site… Read the Post
Timthumb.php Security Vulnerability – Just the Tip of the IcebergDavid DedeAugust 2, 2011 There has been some buzz about a zero day vulnerability found in Timthumb.php that can allow for arbitrary file uploads. Although this is a platform… Read the Post
Keeping Your WordPress Themes UpdatedDre ArmedaAugust 2, 2011 We talk a lot about keeping WordPress and the plugins you use updated. That’s great and all, but you also have to remember that it… Read the Post
Host4africa Mass CompromiseDavid DedeAugust 2, 2011 We are seeing a lot of sites hosted at host4africa.com compromised with Blackhat Spam SEO. Most of them are in the .co.za TLD (at 74.53.0.0/16… Read the Post
The Danger of Remote Widgets – Feedcat.net Sold and Now Distributing MalwareDavid DedeJuly 28, 2011 Do you like to add all types of “widgets” and cool badges to your site? Be careful which ones do you choose, or your site… Read the Post
Top linked sites – What webmasters are linking toDavid DedeJuly 27, 2011 We scan hundreds of thousands of sites daily here at Sucuri and while analyzing some of the data we got interested on what sites are… Read the Post
Python: No such file or directory – Your site is likely compromisedDavid DedeJuly 18, 2011 If you run a WordPress site and you are seeing the following error at the top of your pages: sh: /usr/local/bin/python: No such file or directory… Read the Post
Google blocks .co.cc, attackers are now using .co.tvDavid DedeJuly 6, 2011 It is being reported that Google took action against the high number of malware sites in the .co.cc domain, removing more than 11 million sites… Read the Post
WordPress 3.2 and PHP support – Security effectDavid DedeJuly 4, 2011 WordPress 3.2 is going to be released very soon and one of the biggest changes is that they will drop support for PHP4 and all… Read the Post