Personal Online Privacy – Data & Browser Privacy
Victor Santoyo Continuing a series on how to strengthen your personal online privacy, we are taking personal inventory of how we connect online. These were themes covered…
Plugins added to Malware Campaign: November 2019
John Castro This is an update for the long-lasting malware campaign targeting vulnerable plugins since January. Please check our previous updates below: Multi-Vector Attack in Server Logs:…
Another Fake Google Domain: fonts.googlesapi.com
Luke Leal Our Remediation team lead Ben Martin recently found a fake Google domain that is pretty convincing to the naked eye. The malicious domain was abusing…
Website Security Tips for Black Friday & Cyber Monday
Rianna MacLeod Sucuri’s focus has always been on educating website owners about the latest threats and vulnerabilities — and much of that depends on our industry-leading research…
Black Friday/Cyber Monday Ecommerce Security Threats
With the end of November comes the height of the holiday shopping season — specifically Black Friday and Cyber Monday sales, which typically span the…
Wrong content-type to XSS
WordPress Social Sharing Plugin – Sassy Social Share, which currently has over 100000 installations just fixed a Cross Site Scripting Vulnerability. This bug allows attackers…
How Many Types of Hackers Are There?
Juliana Lewis If you are a tech savvy person, you may have been called a “hacker” at some point by someone less technical. Maybe you’ve heard of…
How to Recognize a Phishing Campaign
Antony Garand Phishing attacks and campaigns have always been a hot topic in online security. With many posts tagged as “phishing” on our blog — the first…
Down the Malware Rabbit Hole: Part II
Cesar Anjos In our last post in this series, we took a look at a code snippet that had been encoded in a very specific way —…
Mixed Content Warnings in Google Chrome
Peter Kankowski Migrating your website to HTTPS may seem like a simple task. Get the TLS/SSL certificate, install it on your web server, and you’re done. The…
Malicious Android Application Used in Phishing Scam
Krasimir Konov While we deal with a lot of phishing cases, we rarely see mobile applications used as part of a phishing campaign—these apps add a layer…