Security News

Ask a Security Professional: WordPress Database Security Part One — Anatomy of WordPress (InfoSecIsland)
2017-03-01 19:07

Part One of #AskSecPro is an introduction to some of the infrastructure behind WordPress.

Million-Plus WordPress Sites Exposed by Vulnerable Plugin (Threatpost)
2017-03-01 12:00

The popular NextGEN Gallery WordPress plugin was recently patched to address a “severe” SQL injection vulnerability that put website databases at risk.

WordPress Plugin With 1 Million Installs Has Critical Flaw (SecurityWeek)
2017-03-01 10:09

Researchers find severe flaw in WordPress plugin with 1 million installs (ArsTechnica)
2017-02-28 19:39

How to add two-factor authentication to your WordPress site (TechRepublic)
2017-02-24 15:54

Cybercriminals start cashing in on vulnerable WordPress websites (ZDNet)
2017-02-23 14:54

Criminals Monetizing Attacks Against Unpatched WordPress Sites (Threatpost)
2017-02-22 21:46

Sites still vulnerable to a REST API endpoint flaw in WordPress are now being targeted by attackers trying to turn a profit.

Virally growing attacks on unpatched WordPress sites affects 2m pages (ArsTechnica)
2017-02-10 22:52

1.5M Unpatched WordPress Sites Hacked Following Vulnerability Disclosure (Threatpost)
2017-02-10 16:45

WordPress security experts said that 1.5M sites have been defaced following the disclosure of a silently fixed content injection vulnerability.

WordPress Flaw Exploited for Remote Code Execution (SecurityWeek)
2017-02-10 13:22