Patchstack

WordPress Business Roundup for the Week of November 14

Dan Knauss

November 18, 2022

Tom Willmot on the Challenges and Opportunities Facing Enterprise WordPress • Tom Lach on the costs of rapid growth — It's not for everyone • The Future of GiveWP and the Block Editor • Evolving Edupack — and Sunsetting It • and more...

Patchstack enriches open vulnerability data with signals showing attack volume, method, and source

Dan Knauss

November 16, 2022

NotesPlanet

Back in August, Oliver Sild announced in Post Status Slack that Patchstack was opening up "additional data" to "enrich the vulnerability data" their service discloses, now "with [a] real-time IP feed of attackers who hit [Patchstack's] virtual patches." Virtual patches…

Patchstack Partners with Hostinger

Dan Knauss

September 27, 2022

BusinessNotes

Patchstack brings fast virtual patches and safe updates to any plugin or theme vulnerabilities potentially affecting Hostinger's customers.

WordPress 6.0.2 Security and Maintenance Release: WordPress.org’s Bug Bounty Program at Work

Dan Knauss

August 31, 2022

NotesPlanet

Ram Dall over at Wordfence has a good breakdown of three vulnerabilities patched in the WordPress 6.0.2 Security and Maintenance Release.

When the Free Rider is Government

Dan Knauss

August 24, 2022

NotesPlanet

Chinmayi Sharma argues our digital infrastructure is built on open source, and it cannot provide adequate security so governments should help out.

Pentesting as Contributing

Dan Knauss

August 8, 2022

NotesPlanet

Robert Rowley at Patchstack explains what I believe is the first-ever reported vulnerability in Gutenberg (the plugin, not in WordPress core) to make the National Vulnerability Database. Robert has opened an issue for discussion in the Gutenberg GitHub repo that…

Nulled Themes and Plugins

Dan Knauss

August 1, 2022

NotesSecurity

My first experiences with "nulled" (or back in the day "cracked") software date back to the golden days of the Atari 8-bit and Commodore Amiga. Blank floppy disks were cheap, and like most kids, I did not have a lot…

Open Secrets: Forced Updates in WordPress

Dan Knauss

July 1, 2022

FeaturesMake WordPress

We've seen forced updates become increasingly common and less controversial over time. But who decides, and how is that decision made? Are there unofficial channels and processes, like a decision tree, for escalating to a forced update?

Post Status Notes #498

David Bisset

May 13, 2022

PlanetSecurity

Are we up or down? What should happen when a license expires? Is the block protocol worth it? Driesnote 2022. WP Engine expands. Becoming a better writer. Best backup solutions. Define your role. Reaktiv wins a spot in Inc's Best Workplaces. Open Source JobHub. Our passwordless future.