Wordfence Research and News

Blog icon
Category: General Security

5 Security Questions For Your Hosting Company

In the past month, our forensic analysts ran into two situations where we saw a significant number of site cleaning customers, all from the same hosting companies, all with the same malware.

Cloudflare Data Leak: How to Secure Your Site

Cloudflare has experienced a data leak over a 5 month period that mixed sensitive data between websites and visitors.

Rapid Growth in Defacements, Who was Hit, Who is Attacking

Yesterday we published numbers indicating how widespread the defacement campaign is targeting the REST-API vulnerability recently fixed in WordPress 4.7.2.

A Feeding Frenzy to Deface WordPress Sites

In this report we share data on the ongoing flood of WordPress REST-API exploits we are seeing in the wild.

Staying Safe: The Wordfence Cyber Security Survival Guide

Occasionally at Wordfence we publish posts that are public service announcements that help the broader online community including your team, friends and relatives.

The January 2017 WordPress Attack Activity Report

Last month we introduced a monthly attack activity report. This report gives you an indication of attack trends during the past month and how they have changed.

Do You Need a WordPress Security Plugin?

At Wordfence we are a big team these days with millions of customers, and we think about security all day long.

Analysis: Methods and Monetization of a Botnet Attacking WordPress

At Wordfence we see a huge range of infection types every day as we help our customers repair hacked websites.

Imminent: Non-HTTPS Sites Labeled “Not Secure” by Chrome

On approximately January 31st, version 56 of the Chrome web browser will be released.

Wide Impact: Highly Effective Gmail Phishing Technique Being Exploited

Update on February 24th: Chrome has resolved this issue to my satisfaction.