Fake wordpress-update.com site used to distribute malware via malicious plugins.

In recent days, we have worked on several infected WordPress websites that all had the particularity of having the same malicious plugin installed: Hackers gained access…

Critical vulnerability in Swift Security Hide WordPress Firewall plugin leads to phishing attack.

This is a very interesting spear phishing attack case that we had to deal with this week. Spear phishing are attempts directed at a specific individual,…

How to block web vulnerability scanners with iptables.

We are often asked how to block the DFind vulnerability scanner (A.K.A. “w00tw00t.at.ISC.SANS.DFind”) with NinjaFirewall, our Web Application Firewall for PHP and WordPress. The bad news…

Jetpack Protect: IP spoofing and improper data validation allow security feature bypass.

Since version 3.4, the popular Jetpack by WordPress.com plugin (15+ million downloads / 1+ million active installs) includes Jetpack Protect, a module “to protect your Jetpack-connected…

NinjaFirewall WP/WP+ introduces automatic updates for security rules.

Starting from WP v1.4 and WP+ v1.2, NinjaFirewall introduces a new feature: It offers the possibility to automatically update the firewall security rules. Each time a new vulnerability…