Wordfence Research and News

Blog icon

The February 2017 WordPress Attack Report

Today we are releasing the WordPress attack report for February 2017.

In-Depth Analysis of a Criminal Organization Targeting WordPress Websites

Today we are posting an in-depth analysis of a prolific brute force attacker.

Cloudflare Data Leak: How to Secure Your Site

Cloudflare has experienced a data leak over a 5 month period that mixed sensitive data between websites and visitors.

Remote Working: No Bad Hair Days at Wordfence

The core team at Wordfence is now 13 full-time employees, and with contractors we are a team of 29.

A Big Thank You to our Premium Customers for Powering Wordfence and Helping Secure the Community

At Wordfence we are intensely customer focused. A few years ago when we made our first non-founder hires, we hired two amazing people: Matt Barry and Tim Cantrell.

Wordfence In Depth: How Malware Becomes Scan Signatures

One of the most effective ways the Wordfence team keeps the WordPress community and customers secure is through something we call the ‘Threat Defense Feed’.

WordPress Used as Command and Control Server in 2016 Election Hack

On Friday evening the Department of Homeland Security released a report [PDF link] containing updated and broader analysis of Russian civilian and military intelligence organization’s attempts to interfere with the 2016 US election.

Rapid Growth in Defacements, Who was Hit, Who is Attacking

Yesterday we published numbers indicating how widespread the defacement campaign is targeting the REST-API vulnerability recently fixed in WordPress 4.7.2.

A Feeding Frenzy to Deface WordPress Sites

In this report we share data on the ongoing flood of WordPress REST-API exploits we are seeing in the wild.

Staying Safe: The Wordfence Cyber Security Survival Guide

Occasionally at Wordfence we publish posts that are public service announcements that help the broader online community including your team, friends and relatives.