Wordfence Research and News

Blog icon

The January 2017 WordPress Attack Activity Report

Last month we introduced a monthly attack activity report. This report gives you an indication of attack trends during the past month and how they have changed.

Reminder to Update to WordPress 4.7.2 and Check Your Site

During the past few weeks we have seen two WordPress core security updates.

XMLRPC or WP-Login: Which do Brute Force Attackers Prefer

At Wordfence we constantly analyze attack patterns to improve the protection our firewall and malware scan provides.

Announcing Wordfence 6.3.0 – Exciting Improvements

This morning I’m very excited to announce the release of Wordfence 6.3.0.

Do You Need a WordPress Security Plugin?

At Wordfence we are a big team these days with millions of customers, and we think about security all day long.

Analysis: Methods and Monetization of a Botnet Attacking WordPress

At Wordfence we see a huge range of infection types every day as we help our customers repair hacked websites.

Imminent: Non-HTTPS Sites Labeled “Not Secure” by Chrome

On approximately January 31st, version 56 of the Chrome web browser will be released.

WordPress 4.7.1 Security Release with PHPMailer Fix

WordPress 4.7.1 was released on Wednesday. It contains 8 security fixes including a fix for the PHPMailer issue, which we reported on in late December.

Wide Impact: Highly Effective Gmail Phishing Technique Being Exploited

Update on February 24th: Chrome has resolved this issue to my satisfaction.

How the Wordfence Firewall Works

In April of 2016 Wordfence launched a full featured WordPress firewall.