ByDan Knauss
Posted on
WebKit recently released its tracking prevention policy, which defines covert tracking as a type of malware it will “do its best to prevent.” 👏
It will be interesting to see how adtech companies and those who rely on covert tracking will respond.
Wordfence published a comprehensive whitepaper analyzing WP-VCD, which is the name for an intensifying malware campaign that is spread via “nulled” or pirated plugins and themes. ☠️
Denis Sinegubko from Sucuri notes a recent malware redirect campaign that targets vulnerable tagDiv themes and the Ultimate Member Plugin which was recently updated. This is a good reminder to keep your themes and plugins updated, but another good piece of advice from Denis is to “make sure to clean and harden all the sites that…
This is a security nightmare: a researcher managed to breach over 35 major companies’ internal systems (including Microsoft, Apple, PayPal, Shopify, and more) in a software supply chain attack. 😱 The attack comprised uploading malware to open source repositories including PyPI, npm, and RubyGems, which then got distributed downstream automatically into many companies’ internal applications….
Sucuri Security is well known in the WordPress community for being the go-to place for WordPress site monitoring and malware cleanup. Their free WordPress plugin just got some nice new features, too. It now comes with core files integrity checking, a log of user logins and locations, “I’ve been hacked” initial action steps, and some…
Dan and Eric discuss their top picks for WordPress news stories of the week and the topic of professionalism. What is it — what does it mean for us in the WordPress community, and how does it relate to a healthy open source project and business ecosystem?
Add this to the list of crappy things in 2020: Ben Martin at Sucuri shares another newly discovered variation of a credit card swiper he found on a WordPress WooCommerce site. 💳 Ben says, “2020 appears to be the year of the credit card swiper, and more and more of this malware seems to be…
