“Users have been left wondering whether they should continue trusting their own WordPress site, after it was revealed that software developers had administrative access to sites through code hidden behind a popular plugin.” – This seems to be isolated ton one plugin developer, but I wonder if we will see more of this. Read More […]
Most Common Passwords
“And at the same time, some of the passwords that look impressive (“1qaz@WSX,” “7ujMko0”) are just sequences that appear next to each other on the keyboard — a slightly more advanced version of using “qwerty” as your password. ” – lol we’ve seen this a lot too. Read More Here: https://digg.com/2019/most-common-passwords-hacked
WordPress accounted for 90 percent of al...
“Experts said that only 56 percent of the sites they investigated were running an up-to-date CMS at the time they were called in to remediate a hack.” – Yikes Read More Here: https://www.zdnet.com/article/wordpress-accounted-for-90-percent-of-all-hacked-cms-sites-in-2018/
National Republican Campaign Committee E...
The NRCC got hacked during the 2018 midterm elections. Apparently we are just hearing about it now, but it’s still really big news. Very high profile emails were stolen. From the article: “The NRCC brought on the prominent Washington law firm Covington & Burling as well as Mercury Public Affairs to oversee the response to […]
New Cybersecurity Risk, Employee Data
There is a new worry for your cybersecurity team, the loss of employee personal data. The Pennsylvania Supreme court just ruled that employers can be held liable if employee’s sensitive personal data is lost or stolen. “In a recent ruling, the Pennsylvania Supreme Court said that employers are legally responsible for protecting workers’ sensitive information, […]
Why your website is a giant black hole i...
October 18, 2018 Mark Bursic Director of Cybersecurity Critical Syntax Based on a study of over 40,000 WordPress websites in the Alexa top 1 million list, more than 70% of installations are vulnerable to hacker attacks. If those websites that represent some of the highest traffic WordPress installations are vulnerable, how tough do you think […]
WordPress Tech Support Scams Rising
Continue to be vigilant of phishing scams. One of our nonprofit clients sent me one of these emails. They don’t look all that convincing, but they keep getting better. Don’t click on links in emails that say they are from your website or from automated support. This article by Malwarebytes has some good information about […]
Email scam targets WordPress Database
Watch out for any emails with WordPress update buttons. Update from your admin, don’t fall for these phishing scams. This article does a good job explaining the attempts. New email scam targets WordPress users’ database credentials