Blog

  • How to Perform a Website Security Audit [Checklist + Tools]

    If you’re in charge of a website for a company — or are part of a team that is — it’s vital that you check your site’s security on a regular basis. Failing to do so can cause the company serious damage through lost sales and leads, data theft, compliance breaches, and more. This can…

  • 20 Website Vulnerabilities & Security Threats You Need to Know

    When you run an enterprise‑level organization, website security threats are always on your mind. An attack on your system can lead to a security breach, result in data loss, or cause your entire application to shut down. The easiest way to avoid online threats is to remind or educate yourself about website vulnerabilities. Once you’re aware of common…

  • Hacking Campaign Actively Exploiting Ultimate Member Plugin

    UPDATE (2023‑07‑03): A new version, 2.6.7, was released this weekend, and fixes the issue. If you use Ultimate Member, update to this version as soon as possible. You can find Ultimate Member’s incident postmortem here. Recently, Automattic’s WP.cloud and Pressable.com platforms identified a trend in compromised sites, where rogue new administrator accounts kept appearing in the…