Global CyberSecurity
Thousands of Sites with Popup Builder Compromised by Balada Injector
Views: 1,150 On December 11, 2023 WPScan published Marc Montpas’ research on the stored XSS vulnerability in the popular Popup Builder plugin (200,000+ ...
Global CyberSecurity
What is the Principle of Least Privilege?
Views: 1,248 If you own a website and collaborate with other people, the Principle of Least Privilege (PoLP) is a crucial security concept ...
Global CyberSecurity
How to Stop a DDoS Attack in 5 Steps
Views: 1,160 As a webmaster, keeping your site online during large traffic spikes is what you strive for. But how can you be ...
Global CyberSecurity
WordPress Vulnerability & Patch Roundup December 2023
Views: 979 Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one ...
Global CyberSecurity
New Guide: Broken Access Control
Views: 1,259 The complexity of modern websites exposes countless potential vulnerabilities to lurking attackers. One of the most underestimated threats? Broken Access Control ...
Global CyberSecurity
MageCart WordPress Plugin Injects Malicious User & Credit Card Skimmer
Views: 897 One of our analysts recently found an interesting malicious plugin injected into a WordPress / WooCommerce ecommerce website which both creates ...
Global CyberSecurity
What is a Content Security Policy (CSP)
Views: 1,115 It’s always a good idea to be aware of the security issues that might affect your site. For example, cross-site scripting ...














