Magento 1 End of Life
Art Martori It’s no secret that a CMS without support will develop vulnerabilities. Eventually, these lead to a compromised website — which cripples any ecommerce business. When…
Size for Opera: Hiding Spammy Links
Denis Sinegubko There are many different tricks hackers use to make injected spam links invisible to regular visitors. Below is an example employed by one link spam…
Pharma Spam Redirects to .su & .eu Sites
We regularly clean all sorts of black hat SEO infections. During these infection cleanups, we often find compromised websites redirecting visitors to fake “Canadian Pharmacy”…
Halloween Tales of the IoT Crypt
Josh Hammer In the spirit of Halloween, we bring you some of the scariest internet of things (IoT) hacks that we have been made aware of. While…
Desperate scammers
Luke Leal In an ideal scenario, when a scam website is found by a blacklist authority, it’s flagged as malicious and eventually taken down by the domain…
Data URLs and HTML Entities in New WordPress Malware
Last week, an ongoing WordPress malware campaign started a new wave which included a variety of experimental injection types. Scripts as Data URLs The first…
Fake French Police Sextortion Scam
There has been a noted increase in the number of sextortion scams during 2019. These scam campaigns are commonly distributed through email, but any method…
Throwback Threat Thursday: JCE Vulnerability
Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…
NIST Cybersecurity Framework
Juliana Lewis The United States National Institute of Standards and Technology (NIST) has created a framework for improving critical infrastructure cybersecurity, referred to as the NIST Cybersecurity…
Personal Online Privacy – Connecting Online
Victor Santoyo When California passed an online privacy law that will take effect on Jan. 1, 2020, it made me think about a user’s responsibility when it…
Fake UpdraftPlus Plugins
We often find various fake WordPress plugins installed by hackers during website cleanups. Recently, we’ve noticed a new wave of infections that install fake plugins…