Wordfence Research and News

Blog icon
Category: WordPress Security

5 Security Questions For Your Hosting Company

In the past month, our forensic analysts ran into two situations where we saw a significant number of site cleaning customers, all from the same hosting companies, all with the same malware.

Support End-to-End Encryption on the Web

The Wordfence Team would like to encourage website owners and Internet users to support end-to-end encryption on the Web.

1.4 Million Attacks in 24 Hours: 32% Blocked by the New Blacklist

Last Friday we quietly launched a new Premium feature in Wordfence: A real-time IP blacklist that completely blocks known malicious IPs from accessing your website.

Wordfence Launches Real-Time IP Blacklist for Premium Customers

Today we are very excited to announce that we have launched a real-time IP blacklist for Wordfence Premium customers.

WordPress 4.7.3 Security Release – Upgrade ASAP

WordPress 4.7.3 has just been released. It is the third in a series of recent security releases for WordPress core.

Clef Two Factor Authentication is Shutting Down

This morning, two-factor authentication plugin Clef, also known as GetClef, announced that they are shutting down.

The February 2017 WordPress Attack Report

Today we are releasing the WordPress attack report for February 2017.

In-Depth Analysis of a Criminal Organization Targeting WordPress Websites

Today we are posting an in-depth analysis of a prolific brute force attacker.

Cloudflare Data Leak: How to Secure Your Site

Cloudflare has experienced a data leak over a 5 month period that mixed sensitive data between websites and visitors.

A Big Thank You to our Premium Customers for Powering Wordfence and Helping Secure the Community

At Wordfence we are intensely customer focused. A few years ago when we made our first non-founder hires, we hired two amazing people: Matt Barry and Tim Cantrell.