Global CyberSecurity
Stealthy WordPress Malware Drops Windows Trojan via PHP Backdoor
Views: 1,813 Last month, we encountered a particularly interesting and complex malware case that stood out from the usual infections we see in ...
Global CyberSecurity
The Case of Hidden Spam Pages
Views: 1,872 Spammy posts and pages being placed on WordPress websites is one of the most common infections that we come across. The ...
Global CyberSecurity
Malicious WordPress Plugin Creates Hidden Admin User Backdoor
Views: 940 I recently wrote about a case where a malicious plugin was used to steal admin credentials. Here we will examine yet ...
Global CyberSecurity
Analysis of a Malicious WordPress Plugin: The Covert Redirector
Views: 1,704 A few weeks ago, we received a support request from a website owner who was experiencing unexpected redirects. Visitors landed on ...
Global CyberSecurity
Understanding SSRF: Abusing Server Trust from the Inside Out
Views: 1,790 In our daily interactions online, trust is a fundamental currency. We trust servers to handle our data, process our requests, and ...
Global CyberSecurity
Fake WordPress Caching Plugin Used to Steal Admin Credentials
Views: 761 A common trend we see is that bad actors will upload malicious plugins to WordPress sites. These plugins serve a wide ...
Global CyberSecurity
Vulnerability & Patch Roundup — May 2025
Views: 1,761 Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one ...
