Wordfence Research and News

Blog icon
Category: WordPress Security

WordPress: Tracking Emerging Cryptomining Threats

This is a post written by James Yokobosky who works on the Defiant Threat Intelligence team.

Solved: Jetpack Generating Mysterious Admin Email Change Messages

We’ve received quite a few questions about this in the past 24 hours, either via forums, email or twitter.

Getting the Most From Wordfence Premium

If your WordPress site matters, upgrading to Wordfence Premium gives you the best protection available.

Is WordPress Secure?

I recently got a call from a friend I haven’t seen for a while asking me if I’d like to grab a coffee.

PSA: Lessons From The Atlanta Ransomware Situation

In the past few days the City of Atlanta has been hit with a ransomware attack.
Why is my site being attacked?

Ask Wordfence: Why Is an Insignificant Site Like Mine Being Attacked?

This question came in from Keith, a Premium Wordfence customer. We’ve dealt with this question a few times in different ways on the blog, but pulling it all together sounds like a great post.

PSA: Replace Your SSL/TLS Certs by Symantec, Thawte, VeriSign, Equifax, GeoTrust and RapidSSL

This is a public service announcement and a reminder to site owners.

New Guides From Wordfence To Help Clean a Hacked Website

At Wordfence, one of our goals is to empower you as much as possible to be self-sufficient, at no additional cost.

New Feature Protects Against Password Leak Attacks

To better protect our users’ websites, we work with a lot of data from sources like our Security Services Team and the Wordfence network.

Cryptomining Supply Chain Attack Hits Government Websites

In the past 24 hours, Security researcher Scott Helme discovered that a third party accessibility plugin called ‘Browsealoud’ had their servers compromised.