Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A newly disclosed high-severity security flaw impacting OttoKit (formerly SureTriggers) has come under active exploitation within a few hours of public disclos…
Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of spam can be so overwhelming that finding useful informat…
Cybersecurity researchers have unearthed a new ongoingMagecart-style web skimmer campaign that's designed to steal personally identifiable information (PII) an…
A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative cre…
Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findin…
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-c…
Fedora released an update for WordPress 6.9.5, addressing critical security vulnerabilities including SQL injection issues and potential remote code execution …
WordPress admins maintaining real estate websites with RealHome Theme and plugin must secure their sites…Unpatched Vulnerabilities Exist In RealHome Theme And …
In recent months, Linux security administrators and WordPress site owners have encountered a formidable adversary: MUT-1244 . This threat actor has been unleas…
A serious code execution vulnerability compromised the security of the GiveWP WordPress plugin, risking thousands…GiveWP Plugin Vulnerability Risked 100,000+ W…
A serious security vulnerability affected the WordPress plugin Security Shield, which could allow arbitrary file…Serious Security Vulnerability Patched In Shie…
Threat actors are leveraging manipulated search results and bogus Google ads that trick users who are looking to download legitimate software such as WinSCP in…
Threat actors have been observed serving malicious code by utilizing Binance's Smart Chain (BSC) contracts in what has been described as the "next level of bul…
Researchers discovered numerous security flaws in the WordPress plugin Jupiter X Core that allow website…Jupiter X Core Plugin Flaws Threatened 172K Websites W…
A security flaw has been uncovered in the WooCommerce Stripe Gateway WordPress plugin that could lead to the unauthorized disclosure of sensitive information.T…
Heads up, WordPress admins! It’s time to update your websites with the latest Beautiful Cookie…XSS Flaw Riddled Beautiful Cookie Consent Banner WP Plugin on La…
A serious vulnerability existed in the popular WordPress plugin Elementor Pro that could allow website…Severe Elementor Pro WP Plugin Vulnerability Actively Ex…
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbedDBatLoader."The malware payloa…
Travel agencies have emerged as the target of a hack-for-hire group dubbedEvilnumas part of a broader campaign aimed at legal and financial investment institut…
Microsoft says the Sysrv botnet is now exploiting vulnerabilities in the Spring Framework and WordPress to ensnare and deploy cryptomining malware on vulnerabl…
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of …
Running PHP on a Linux web server is a prerequisite for the use of many popular applications such as Wordpress, Joomla and Drupal. Linux administrators and web…
Heads up, WordPress admins! The popular plugin WP Statistics had a serious security flaw that…WP Statistics Plugin Flaw Time-Based Blind SQL Injection on Late…
One more vulnerable WordPress plugin needs attention. This time, the flaw appeared in the Email Subscribers & Newsletters plugin byEmail Subscribers & Newslett…
