An Indirect Way to Change cPanel Passwords
Luke Leal There’s no doubt that the ubiquitous “forgot your password?” feature has helped many users who’ve misplaced their password or otherwise forgotten it, however—the tradeoff is…
What is the Cost of Cybercrimes & Attacks
John Booker The word cybercrime is no longer just a word you hear coming from Fortune 500 CEOs anymore. This word has being flashed on every good…
Plugins added to Malware Campaign: September 2019
John Castro This is an update for the long-lasting malware campaign targeting vulnerable plugins during August and September. Please check our previous updates below: Multi-Vector Attack in…
Down the Malware Rabbit Hole – Part 1
Cesar Anjos It’s common for malware to be encoded to hide itself—or its true intentions—but have you ever given thought to what lengths attackers will go to…
A New Wave of Buggy WordPress Infections
Denis Sinegubko We’ve been following an ongoing malware campaign for the past couple of years now. This campaign is renowned for its prompt addition of exploits for…
National Cybersecurity Awareness Month
Juliana Lewis Since 2003, October has been recognized as National Cybersecurity Awareness Month. It is an annual campaign to raise awareness about the importance of cybersecurity and…
Raising Awareness: WPBeginner Spotlight
Chase Watts We’re dedicated to creating the best website security guides and professional services. One way we get our message out is by partnering with open-source CMS…
Zero-Day RCE in vBulletin v5.0.0-v5.5.4
Marc-Alexandre Montpas A new remote code execution (RCE) zero-day vulnerability has been disclosed by an anonymous researcher on the full disclosure mailing list this past Monday. This…
Joomla! Security Best Practices: 12 Ways to Keep Joomla! Secure
Victor Santoyo At Sucuri, we’re often asked how website owners and webmasters can secure their websites. However, most advice can often be too broad; different content management…
The Hacker Returns: A Backdoor Edition
Moe O Once an attacker manages to hack and gain access to a target site or system, they typically work hard to maintain their access—as long as…
Fake SSO Used In Multi-Email Provider Phishing
Single sign-on (SSO) allows users to sign into a single account (e.g Google) and access other services like YouTube or Gmail without authenticating with a…