Throwback Threat Thursday: JCE Vulnerability
Luke Leal Throwback Threat Thursday is a series of posts where we recall older vulnerabilities that have since been patched by their developers. In the past, these…
NIST Cybersecurity Framework
Juliana Lewis The United States National Institute of Standards and Technology (NIST) has created a framework for improving critical infrastructure cybersecurity, referred to as the NIST Cybersecurity…
Personal Online Privacy – Connecting Online
Victor Santoyo When California passed an online privacy law that will take effect on Jan. 1, 2020, it made me think about a user’s responsibility when it…
Fake UpdraftPlus Plugins
Denis Sinegubko We often find various fake WordPress plugins installed by hackers during website cleanups. Recently, we’ve noticed a new wave of infections that install fake plugins…
Sucuri_encrypted: Magento Malware
In an effort to make malicious code appear to be credible, hackers commonly piggyback on the names of reputable, well-known companies and services. Typical examples…
Cryptominers & Backdoors Found in Fake Plugins
Krasimir Konov When cleaning websites, we regularly find phishing pages, malicious code injected into files, and SEO spam. However, over the past couple of months we’ve also…
Top 10 Website Hardening Tips
Northon Torga Website hardening means adding layers of protection to reduce the risk of website attacks, a process known as “defense in depth.” Here are our top…
What Are Ethical Hackers?
Alycia Mitchell There’s an issue with how some people define the word “hacker.” For some, it’s a word synonymous with “cybercriminal,” but not in the infosec community.…
An Indirect Way to Change cPanel Passwords
There’s no doubt that the ubiquitous “forgot your password?” feature has helped many users who’ve misplaced their password or otherwise forgotten it, however—the tradeoff is…
What is the Cost of Cybercrimes & Attacks
John Booker The word cybercrime is no longer just a word you hear coming from Fortune 500 CEOs anymore. This word has being flashed on every good…
Plugins added to Malware Campaign: September 2019
John Castro This is an update for the long-lasting malware campaign targeting vulnerable plugins during August and September. Please check our previous updates below: Multi-Vector Attack in…