Collaborate Disseminate
URL shorteners are often used by malware peddlers and attackers to trick users into following a link they otherwise wouldn’t. But Coinhive’s URL shortener carries an added danger: your CPU power can be surreptitiously hijacked to mine Moner… Continue reading How a URL shortener allows malicious actors to hijack visitors’ CPU power
By Waqas
Another day, another series of DDoS attacks – This time
This is a post from HackRead.com Read the original post: Website security firm Sucuri hit by large scale volumetric DDoS attacks
Continue reading Website security firm Sucuri hit by large scale volumetric DDoS attacks
Google began sending out notices to site owners this month who haven’t yet migrated from HTTP to HTTPS warning them that in October their sites will be marked “NOT SECURE.” Continue reading Google Reminding Admins HTTP Pages Will Be Marked ‘Not Secure’ in October
Researchers spotted a strain of cookie stealing malware, injected into a legitimate JavaScript file, masquerading as a WordPress core domain.
Continue reading Session Hijacking, Cookie-Stealing WordPress Malware Spotted
Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information. Continue reading Credit Card Scrapers Continue to Target Magento
Researchers said last week they came across a malicious function that was snuck into a module in Magento in order to steal credit card information. Continue reading Credit Card Scrapers Continue to Target Magento
The popular NextGEN Gallery WordPress plugin was recently patched to address a “severe” SQL injection vulnerability that put website databases at risk. Continue reading Million-Plus WordPress Sites Exposed by Vulnerable Plugin
WordPress security experts said that 1.5M sites have been defaced following the disclosure of a silently fixed content injection vulnerability. Continue reading 1.5M Unpatched WordPress Sites Hacked Following Vulnerability Disclosure
WordPress sites slow to update to the recent 4.7.2 security release run the risk of falling victim to a handful of defacement attacks spotted by Sucuri. Continue reading Attackers Capitalizing on Unpatched WordPress Sites
Cross-posted on the Internet Storm Center Diary.Updated with contest winners 14 DEC. Congrats to: Chrissy @SecAssistanceOwen Yang @HomingFromWorkPaul Craddy @pcraddyMason Pokladnik – Fellow STI gradElliot Harbin @klax0ffIn the last of a three part (Pa… Continue reading Toolsmith – GSE Edition: Image Steganography & StegExpose