WordPress Security Archives - Page 61 of 68

Mossack Fonseca Breach – WordPress Revolution Slider Plugin Possible Cause

Update: We have written a follow-up post on how an attacker may have moved laterally on the network from WordPress into the email server.

Vulnerability in User Role Editor – Users Can Become Admins

There is a major vulnerability in a popular plugin with over 300,000 active installs: User Role Editor 4.24 and older.

Hacked Sites Suffer Long Term Search Ranking Penalties

During our research into what the WordPress community knows about hacked websites, we discovered that there is very little data available on the subject.

Get Rid of Data to Help Secure It

Last week I spent some time chatting with Mike Dahn who is the co-founder of the BSides information security conferences globally.

A Backdoored WordPress Plugin and 3 Additional Vulnerabilities

We have several plugin vulnerabilities we’d like to bring to your attention this week.

The Crypto Wars – How We Arrived at Apple vs United States

This week our team is in San Francisco attending the RSA 2016 Security conference.

Scary Data – Trends in Malware, Phishing, Site Cleaning and Bad Networks

At Wordfence we have great visibility into the size and scale of the threat facing the WordPress community.

WordPress-Delivered Ransomware and Hacked Linux Distributions

In a rather unfortunate turn of events earlier this month, the Hollywood Presbyterian Medical Center was infected with ransomware.

Why Wordfence Supports Strong Encryption Without Backdoors

This morning global headlines are discussing Apple’s move to oppose a court order issued by the US government regarding breaking into it’s own iPhone.

6 Million Password Attacks in 16 Hours and How to Block Them

Last week in the President’s cyber security op-ed in the Wall Street Journal he implored Americans to move beyond simple passwords and to enable two factor authentication or cellphone sign-in.

Wordfence Research and News