PCI for SMB: Requirement 7 & 8 – Implement Strong Access Control Measures
Victor Santoyo Update: Read our new PCI Compliance guide. This is the fifth post in a series of articles on understanding the Payment Card Industry Data Security…
SSL vs. Website Security
Gerson Ruiz Having a website today is way easier than it was 10 or 15 years ago. Tools like content management systems (CMS), website builders, static site…
E-Commerce Security – Planning for Disasters
This is the last post in our series on E-commerce Security: Intro to Securing an Online Store – Part 1 Intro to Securing an Online…
Backdoor Uses Paste Site to Host Payload
Bruno Zanelato Finding backdoors is one of the biggest challenges of a website security analyst, as backdoors are designed to be hidden in case the malware is found…
Multi-Vector WordPress Infection from Examhome
Denis Sinegubko This September, we’ve been seeing a massive infection wave that injects malicious JavaScript code into .js, .php files and the WordPress database.> The script looks…
Outdated Duplicator Plugin RCE Abused
Peter Gramantik We’re seeing an increase in the number of cases where attackers are disabling WordPress sites by removing or rewriting its wp-config.php file. These cases are all linked…
Unsuccessfully Defaced Websites
Luke Leal Defaced websites are a type of hack that is easy to notice and a pain for website owners. Recently, we came across some defacement pages…
New Guide on How to Use the Sucuri WordPress Security Plugin
Juliana Lewis Sucuri has always been active in the WordPress community. We’ve attended WordCamps around the world, created tools and features specifically for WordPress, and have maintained…
“Google Fonts” popup leads to malware
A recent malware injection in a client\’s WordPress file was found to be targeting website visitors that were using the Google Chrome browser to access…
PCI for SMB: Requirement 5 & 6 – Maintain a Vulnerability Management Program
Update: Read our new PCI Compliance guide. This is the fourth post in a series of articles on understanding the Payment Card Industry Data Security…
WordPress Database Upgrade Phishing Campaign
We have recently been notified of phishing emails that target WordPress users. The content informs site owners that their database requires an update and looks…