Global CyberSecurity
Critical Vulnerability in File Manager Plugin Affecting 700k WordPress Websites
Views: 2,023 Yesterday, the WordPress plugin File Manager was updated, fixing a critical vulnerability allowing any website visitor to gain complete access to ...
Global CyberSecurity
Using assert() to Execute Malware in PHP 7 Environments
Views: 1,655 Initially released December 2015, PHP 7 introduced a multitude of performance and security improvements. Approximately 43.7% of websites across the web ...
Global CyberSecurity
Persistent WordPress User Injection
Views: 1,856 Our team recently stumbled across an interesting example of malicious code used to add an arbitrary user inside WordPress. The following ...
Global CyberSecurity
Magento Multiversion (1.x/2.x) Backdoor
Views: 2,528 The Magento 1 EOL date has already passed, however it’s evident that a large number of websites will continue to use ...
Global CyberSecurity
COVID-19 Chloroquine Pharmaspam
Views: 2,106 A recent SiteCheck scan of an organization’s website showed an interesting pharmacy spam injection targeting COVID-19-related pages of websites. The HTML ...
Global CyberSecurity
CDN-Filestore Credit Card Stealer for Magento
Views: 2,203 During a website remediation, we recently discovered a new version of a Magento credit card stealer which sends all compromised data ...
Global CyberSecurity
Web Crawler & User Agent Blocking Techniques
Views: 2,161 This is a simple script that allows hackers to block specific crawlers based upon website requests from specific user-agents. This is ...
