Many of us use WordPress for our web sites – if you do not know what your web designer is using for you website, then you have a cyber security issue, and you or your cyber security consultant should get in contact with your web designer ASAP. Here is one …
The “Swiss Army Knife” of Linux malware
Plug-ins is a way of vendors and third-parties extending the functionality of software – it work very well, the success of WordPress is partly based on plug-ins. Now the threat actor vendors are taking the same approach with their malware – with the plug-ins helping to obfuscate the malware to …
How secure is your WordPress website and blog? Do you even know if your organisation’s website is built on WordPress?
There has been a flurry of WordPress security and vulnerability articles over the past week or so. It is no surprise that the world’s most popular website builder is a target for threat actors, especially as Automatic’s core code can be added to with third-party, open-source or even self-written plugins, …
CISA security advisories
These Cybersecurity and Infrastructure Security Agency advisories, cover a number of packages – possibly the one of most interest is Drupal – a popular website content manager, similar to WordPress. Drupal Releases Security Updates | CISA Citrix Releases Security Updates for ADC and Gateway | CISA
School WordPress plug-in is vulnerable to attack
If you use or responsible for a School Management system – check this does not impact you. The ICO takes a dim view of child privacy violations. Researchers find backdoor lurking in WordPress plugin used by schools | Ars Technica
