04
Oct
In the past 30 days we’ve seen a new attack vector on WordPress websites - management consoles. First, a disclaimer. The infections discussed here are NOT the result of faulty programming...
Read More
Recent hacking news
14
Jul
Almost 60K infected sites had installed a WordPress security plugin with a malware scanner. This report is intended to answer questions and add context to our recently announced discovery of tens...
Read More
22
Jan
Okay, WordPress people, check this out by Brian Krebs: https://krebsonsecurity.com/2022/01/crime-shop-sells-hacked-logins-to-other-crime-shops/ What's important to note is this: "One example is Genesis Market, where customers can search for stolen credentials and authentication cookies from a...
Read More
01
Nov
Latest SPAM tricks In your work, is there anything that would stop you from reaching your goals? Probably not. Hackers, or cyber criminals as some call them, are the same way. Their income...
Read More
18
May
We just received a notification: We are getting in touch to let you know about a stored XSS and a CSRF vulnerability in the Avada WordPress Theme versions prior to 5.1.5...
Read More
11
Apr
I had been preparing this write-up for over a week now, but I see that SiteLock beat me to the punch in their blog. As some of you know, we specialize...
Read More
20
Feb
There seems to be a renewed infection of websites based on WordPress, Joomla and other popular website platforms, with some malicious javascript that has been around for awhile. The code referred...
Read More
29
Dec
Investigating some interesting entries in log files from our customers, we see that hackers apparently are still looking for infected WordPress websites. First we see this: (IP address blanked to protect the infected) -...
Read More
28
Dec
I get real tired of people reading something online and then thinking it's the real truth. Of course, this blog post falls into that category too, but I will explain. Over...
Read More