The Importance of logging for web applications – Security talk
David Dede If you think that your logs are only useful when something crashes or when you need to troubleshoot errors on your web application, think again!…
Venezuela Government site hacked and spreading malware
Since we have been noticing that full-disclosure works, we will continue with that. We have detected in our honeypots that since January the site www.miranda.gov.ve…
Honeypot analysis – Full disclosure works
When all else fails, *full disclosure (the process) seems to work. Early in January, we sent a bunch of emails to the people at the…
.ORG whois reporting DNSSEC status
I was glad to see a handful of whois updates today coming from all the .ORGs that we are monitoring at Sucuri. Basically now at…
Colombia Government sites hacked (and spreading malware)
Daniel Cid You would expect that a security-related web site would be secure, no? What about an official web site from a Government? Should that be safe?…
PHP in the user agent (attacking log analysis tools?)
Lately I started to see a few web-based attacks with a php script inside the user agent. Something like this: a.b.229.82 – – [19/Jan/2010:22:43:39 -0700]…
Georgia government sites hacked (and spreading malware)
*UPDATE: A few hours after this post, they removed the malware from justice.gov.ge and other sites. I am glad we had some effect. You know,…
Removing Malware From a WordPress Blog – Case Study
This post is very specific to one type of infection. There are many different types of WordPress infections and symptoms, do not be discouraged if…
Amazon.com blacklisted by SpamHaus XBL
Update: Spamhaus contact us to let us know that they removed amazon from the blacklist and are investigating the issue. SPAMHAUS has various blacklists and…
Fingerprinting web applications
This paper describes a technique to remotely detect the version (fingerprint) of a web application. We cover WordPress, Mediawiki and Joomla in the article, but…
Quick Sucuri Update
We are very happy to announce that we reached 5 thousand (yes, 5k) sites being monitored by our Network Integrity Monitor solution. To celebrate, we…