Seite wählen
Code Comments Reveal SCP-173 Malware

Code Comments Reveal SCP-173 Malware

We sometimes find malware code injections that contain strange code comments, which are normally used by programmers to annotate a section of code — for example, a short description of a feature or functionality for other developers to reference. Oftentimes, hackers...

WordPress 5.5 is Now the Default for New WP Engine Sites

WordPress 5.5 “Eckstine” is the second major release for WordPress this year, and it’s jam-packed with exciting features and functionality—it’s also now the current default version of WordPress for all new sites built on WP Engine’s managed WordPress platform. If...

Episode 94: Hosting Provider Exposed 63 Million Customer Records

A hosting provider exposed over 63 million customer records via an open elastic search database containing verbose logs with plain-text username/password credentials for numerous WordPress, Magento and other sites. We also talk about the security updates in WordPress...
ALFA TEaM Shell ~ v4.1-Tesla: A Feature Update Analysis

ALFA TEaM Shell ~ v4.1-Tesla: A Feature Update Analysis

We’ve seen a wider variety of PHP web shells being used by attackers this year —  including a number of shells that have been significantly updated in an attempt to “improve” them. Depending on the scope of changes and feature enhancements that are added to an...