The Wild West of drive-by cryptocurrency mining

As more and more Coinhive clones continue popping up, chances of users’ CPU power being hijacked for cryptocurrency mining are rising. According to Malwarebytes’ latest figures, their AV solution blocked an average of 8 million cryptojacking attempts per day from late September to late October. And that’s just the attempts tied to Coinhive domains and proxies! Censys’s search engine reveals that nearly 900 of the top one million most visited sites runs the Coinhive script. … More Continue reading The Wild West of drive-by cryptocurrency mining

For eight years, hackers have been able to exploit this password-stealing flaw in Joomla

For the last eight years a critical vulnerability has lurked within the code of the Joomla CMS which could have allowed malicious hackers to steal every user’s login credentials – including those belonging to administrators.
Read more in my article on … Continue reading For eight years, hackers have been able to exploit this password-stealing flaw in Joomla

Joomla Patches Eight-Year-Old LDAP Injection Vulnerability

Joomla on Tuesday patched a critical LDAP injection vulnerability that had lingered in the content management system for eight years. Attackers could use this bug to steal admin login credentials. Continue reading Joomla Patches Eight-Year-Old LDAP Injection Vulnerability

Latest Joomla 3.7.1 Release Patches Critical SQL Injection Attack

If your website is based on the popular Joomla content management system, make sure you have updated your platform to the latest version released today.

Joomla, the world’s second popular open source Content Management System, has reportedly patched a critical vulnerability in its software’s core component.

Website administrators are strongly advised to immediately install latest Joomla

Continue reading Latest Joomla 3.7.1 Release Patches Critical SQL Injection Attack

Will PHP malware from my hacked website be able to infect my computer locally if downloaded?

I have site that is hacked and flagged by google for having malware:
Some pages on this website send visitors to the following dangerous websites: freshmodel.pw.

I made a backup of everything before I started, added a new cl… Continue reading Will PHP malware from my hacked website be able to infect my computer locally if downloaded?