Website Security Tips for Black Friday & Cyber Monday
Rianna MacLeod Sucuri’s focus has always been on educating website owners about the latest threats and vulnerabilities — and much of that depends on our industry-leading research…
Black Friday/Cyber Monday Ecommerce Security Threats
Luke Leal With the end of November comes the height of the holiday shopping season — specifically Black Friday and Cyber Monday sales, which typically span the…
Wrong content-type to XSS
John Castro WordPress Social Sharing Plugin – Sassy Social Share, which currently has over 100000 installations just fixed a Cross Site Scripting Vulnerability. This bug allows attackers…
How Many Types of Hackers Are There?
Juliana Lewis If you are a tech savvy person, you may have been called a “hacker” at some point by someone less technical. Maybe you’ve heard of…
How to Recognize a Phishing Campaign
Antony Garand Phishing attacks and campaigns have always been a hot topic in online security. With many posts tagged as “phishing” on our blog — the first…
Down the Malware Rabbit Hole: Part II
Cesar Anjos In our last post in this series, we took a look at a code snippet that had been encoded in a very specific way —…
Mixed Content Warnings in Google Chrome
Peter Kankowski Migrating your website to HTTPS may seem like a simple task. Get the TLS/SSL certificate, install it on your web server, and you’re done. The…
Malicious Android Application Used in Phishing Scam
Krasimir Konov While we deal with a lot of phishing cases, we rarely see mobile applications used as part of a phishing campaign—these apps add a layer…
Why Reinfections Happen with a WAF
A web application firewall (WAF) is a great way to detect and filter incoming malicious requests before they can exploit website vulnerabilities and security flaws.…
Vulnerable Versions of Adminer as a Universal Infection Vector
Denis Sinegubko This past week, we’ve been monitoring a new wave of website infections mostly impacting WordPress and Magento websites. We found that hackers have been injecting…
Skimmers for Both Magento and WordPress
We often write about malware that steal payment information from sites built with Magento and other types of e-commerce CMS. When discussing credit card skimmers…