How to Stop a DDoS Attack & Prevent Future Attacks

DDoS attacks are a growing threat for websites. But do you know how to mitigate them in their tracks? We’ll cover some essential fundamentals on stopping a DDoS attack and preventing them from happening in the future.
Specifically, as a webmaste… Continue reading How to Stop a DDoS Attack & Prevent Future Attacks

Fake Google Domains Used in Evasive Magento Skimmer

We were recently contacted by a Magento website owner who had been blacklisted and was experiencing McAfee SiteAdvisor “Dangerous Site” warnings.
Our investigation revealed that the site had been infected with a credit card skimmer loading… Continue reading Fake Google Domains Used in Evasive Magento Skimmer

How to Perform a Website Security Audit ( with Checklist)

Why Should You Audit Your Website for Security?
Most hacks and cyber attacks happen because of poor security practices. The first step you can take to improve your online security is knowing exactly what’s installed on your website.
Having a che… Continue reading How to Perform a Website Security Audit ( with Checklist)

Reset Email Account Passwords after Website Infection: Follow Up

In a previous analysis of a malicious file, we demonstrated why you should always update your email account passwords after a security compromise.
The information security threat landscape is always changing. Likewise, the tools used by bad actors are… Continue reading Reset Email Account Passwords after Website Infection: Follow Up

The Strange Case of the Malicious Favicon

During the past year, our Remediation department has seen a large increase in the number of fully spammed sites.
The common factors are strangely named and unusually located favicon.ico files, along with the creation of “bak.bak” index fil… Continue reading The Strange Case of the Malicious Favicon

Slack Resets Passwords For Users Who Hadn’t Changed It Since 2015 Breach

If you use Slack, a popular cloud-based team collaboration server, and recently received an email from the company about a security incident, don’t panic and read this article before taking any action.

Slack has been sending a “password reset” notific… Continue reading Slack Resets Passwords For Users Who Hadn’t Changed It Since 2015 Breach

Engage Your Management with the Definitive ‘Security for Management’ Presentation Template

In every organization, there is a person who’s directly accountable for cybersecurity. The name of the role varies per the organization’s size and maturity – CISO, CIO, and Director of IT are just a few common examples – but the responsibility is simil… Continue reading Engage Your Management with the Definitive ‘Security for Management’ Presentation Template

How to secure your website – InfoSec tips for newbie website owners

By David Balaban
And Again About Hosting Security! Today, there are still many people who think that the Internet is as a comprehensive encyclopedia of the world. However, their number is decreasing. There are more and more people who rightfully consid… Continue reading How to secure your website – InfoSec tips for newbie website owners