websites

Malware & Threats

Issued by: Security Week

An analysis of nightly backups of more than 400,000 unique web servers has revealed the existence of more than 47,000 malicious plugins installed on nearly 25,000 unique WordPress websites. More than 94% of these plugins (over 44,000) continue to be in use today. Over 3,600 of the identified malicious plugins were purchased from legitimate marketplaces…

Vulnerabilities

Issued by: Security Week

Websites Hacked via Zero-Day Flaws in WordPress Plugins

Zero-day flaws affecting several WordPress plugins have been exploited by malicious actors to plant backdoors and take control of vulnerable websites. The attacks have been spotted by Wordfence, a company that specializes in protecting WordPress websites. The firm’s investigation revealed that attackers had been exploiting previously unknown vulnerabilities in three WordPress plugins.

Application Security

Issued by: Help Net Security

Tips to shop safely on Cyber Monday

As consumers gear up for Cyber Monday, the largest online shopping day of the year, cybercriminals are also preparing to take advantage of deal-seekers. IBM X-Force researchers are monitoring malicious activity closely to help organizations and consumers stay safe during the holiday shopping season. Researchers have already seen cybercriminals actively masking malicious malware in emails…

Network Security

Issued by: Dark Reading

As Deadline Looms, 35 Percent Of Web Sites Still Rely On SHA-1

Over 60 million web sites are relying on a hashing algorithm that will be blocked by major browsers starting Jan 1. A surprising 35 percent of websites around the world are still using SHA-1 though barely 45 days remain before some of the major browsers stop trusting certificates signed with the hash algorithm altogether.

Network Security

Issued by: Dark Reading

Catching Online Scammers, Dealers & Drug Dealers With DNS

Takedowns of malicious or fraudulent websites is a temporary fix for online fraud and crime, mainly because the bad guys then just put up another website domain they have waiting in the wings. Researchers at Black Hat Europe in London tomorrow will demonstrate a new technique they developed that uses Domain Name Service (DNS) analysis…