Global CyberSecurity
New Guide: Broken Access Control
Views: 1,246 The complexity of modern websites exposes countless potential vulnerabilities to lurking attackers. One of the most underestimated threats? Broken Access Control ...
Global CyberSecurity
MageCart WordPress Plugin Injects Malicious User & Credit Card Skimmer
Views: 883 One of our analysts recently found an interesting malicious plugin injected into a WordPress / WooCommerce ecommerce website which both creates ...
Global CyberSecurity
What is a Content Security Policy (CSP)
Views: 1,092 It’s always a good idea to be aware of the security issues that might affect your site. For example, cross-site scripting ...
Global CyberSecurity
Analysis of the Fake WordPress CVE-2023-46182 Patch Plugin & Phishing Campaign
Views: 1,090 On December 1, 2023, several security researchers reported about a new phishing campaign targeting WordPress administrators. WordPress sites owners had started ...
Global CyberSecurity
Critical RCE Vulnerability Patched in Backup Migration Plugin
Views: 1,096 On December 6th, 2023, the WordPress plugin Backup Migration received a critical security patch for a remote code execution vulnerability. Details ...
Global CyberSecurity
WPScan Intro: How to Scan for WordPress Vulnerabilities
Views: 1,333 In this post, we will look at how to use WPScan as a WordPress vulnerability scanner. This security tool provides you ...
Global CyberSecurity
40 New Domains of Magecart Veteran ATMZOW Found in Google Tag Manager
Views: 1,087 Hackers like Google Tag Manager: millions of sites use it, and they can inject custom scripts and HTML code via a ...
