Fake Parameters Conceal a Backdoor
Denis Sinegubko We found this backdoor in the middle of the logrss.php file that defined the JDocumentRendererRSS class. …function jregisterClass() { // merge arrays $info = array_merge($_REQUEST,$_COOKIE); //…
How to Prevent Cross-Site Contamination for Beginners
Josh Hammer What is Cross-Site Contamination? Cross-site contamination happens when a hacked site infects other sites on a shared server. Think of it as your kid in…
Spam Injector Disguised as License Key in WordPress Website
Moe O Here at Sucuri, we clean WordPress websites every day. There are various types of common malware, but when we stumble upon a different scenario, our…
Optimize Setup to Improve Your Website Resilience for DDoS Attacks
Northon Torga Distributed denial-of-service (DDoS) attacks can disrupt website traffic and impact any business. To help website owners and webmasters improve their website resilience to DDoS attacks,…
Improvements to SiteCheck Website Scanner
Jonas Andrijauskas SiteCheck is Sucuri’s free website malware and security scanner offered to anyone who wants to scan their websites for malware and blacklist status. Last year,…
OWASP Top 10 Security Risks – Part V
Gerson Ruiz To bring awareness to what threatens the integrity of websites, we are continuing a series of posts on the OWASP top 10 security risks. The…
Free SuperCounters Widget Serves Unwanted Redirects to Dating Site
Rianna MacLeod If we navigate way back into the recesses of our memory to the era of GeoCities websites and MySpace pages, we might distinctly recollect the…
How to Improve Your Website Resilience for DDoS Attacks – Part III – WAF
In the first post of this series, we talked about the practices that will optimize your site and increase its resilience to DDoS attacks. In…
Spam Injector Disguised as a License Key
A client reported some weird spam URLs injected on their WordPress website and after an investigation, it turned out that the hacker was hiding the…
OWASP Top 10 Security Risks – Part IV
To bring awareness to what threatens the integrity of websites, we are continuing a series of posts on the OWASP top 10 security risks. The OWASP…
New Year Tips from Security Professionals
Juliana Lewis Have you included website security as a part of your new year’s resolutions for 2019? Here is a quick retrospective on tips some of our…