Administrator panel compromises are one of the most common attacks that everyday WordPress website admins face. We work with thousands of clients who have encountered attacks on their websites and I’ve long ago lost count of the number of times Continue reading The Case for 2FA by Default for WordPress
One of the most important monitoring tools in our security platform is our Sucuri SiteCheck scanner. It’s a free tool to scan your website for known malicious content and malware injections. The usage of SiteCheck also allows us to monitor Continue reading WordPress Overtakes Magento in Credit Card Skimmers
Over the last year we’ve seen an ongoing malware infection which redirects website visitors to scam sites. So far this year our monitoring has detected over 3,000 websites infected with this injection this year and over 17,000 in total since Continue reading WordPress Popunder Malware Redirects to Scam Sites
Recently our Remediation and Research teams have noticed a new wave of malicious cron jobs associated with the notorious AnonymousFox malware. The cron jobs are purpose-built to reinfect the victim websites and make removal of the infection more cumbersome and Continue reading New Wave of AnonymousFox Cron Jobs
If you’re a website developer or server administrator it’s always a good idea to inform your clients about the basics in terms of their website’s security, and the inherent need for cautious security practices. Attacks and the methods of gaining Continue reading Top 5 Topics to Discuss with Clients About Website Security
One of our clients recently submitted a malware removal request with a curious problem: A mystery admin user kept getting re-created on their website. Try as they might, nothing they did would get rid of this user; it just kept Continue reading The Mystery Admin User
Seeking a reliable security testing tool can be overwhelming, given how large the opsec environment has grown over these last few years. Given how large things have grown, it’s become common to overcharge people in the industry for security services Continue reading What are the Best Security Testing Tools (Open Source)?
Visiting websites throughout the decades has always had its risks. With the creation of Flashplayer and JavaScript, site visitors could potentially be impacted by malicious viruses, like the notorious YouAreAnIdiot[.]org pop-ups that caused computers to be overrun by a massive Continue reading Can you be Hacked by Visiting a Website?
It should be no shock by now that a professional can break through anything. These days, zero-days are a dime a dozen, so it’s important to ensure your site is hardened and protected as much as possible. While an SSL Continue reading Can an HTTPS Website be Hacked?
Having an E-Commerce website can have its fair share of risks these days. As a site owner that handles online payments, however, it’s even more important to understand said risks and the best methods of avoiding it from not only Continue reading Demystifying E-Commerce Website Security
As more things shift online it’s become continually necessary to perform regular maintenance to your website. With risks of downtime, errors, and attacks, all of these can overall heavily impact a website’s performance, traffic, and revenue. In this post, we’ll Continue reading How to Create a Website Maintenance Schedule
Re-infections are one of the most frustrating encounters site owners experience. Like a game of whack-a-mole, when you think you’ve found and removed everything malicious, more malicious content pops up. There are some factors to consider that are likely the Continue reading 5 Risks That Can Cause Your Website to Get Reinfected