Blog

  • Surge of JavaScript Malware in sites with vulnerable versions of LiteSpeed Cache Plugin

    If you’ve recently encountered the admin user wpsupp‑user on your website, it means it’s being affected by this wave of infections. Identifying Contamination Signs: The malware typically injects code into critical WordPress files, often manifesting as : Or in the database, when the vulnerable version of LiteSpeed Cache is exploited : decoded version: Cleanup Procedures Identifying Malicious URLs and IPs…

  • New Malware Campaign Targets WP-Automatic Plugin

    A few weeks ago a critical vulnerability was discovered in the plugin WP‑Automatic. This vulnerability, a SQL injection (SQLi) flaw, poses a severe threat as attackers can exploit it to gain unauthorized access to websites, create admin‑level user accounts, upload malicious files, and potentially take full control of affected sites. The Vulnerability The vulnerability lies in…

  • How to Secure Your Website: Top Tips From Enterprise Security Experts

    What tools do you really need to secure a website? How to stay on budget without compromising. The most serious threats and vulnerabilities.