Passionate about website security and bringing truly affordable, effective website security to everyone!
Everywhere
Joined September 2009
- Tweets1.3K
- Following1.5K
- Followers864
- Likes1.3K
Thomas J. Raef retweeted
A few weeks ago, court documents revealed that Meta/Facebook was siphoning user data for competitive intelligence.
Even their top security engineer said that it was uncool.
Remember, if you use a free service (or a service pays you to use it), then YOU are the product.
When you rely on a VPN for your online security, the last thing you want is for your data to be exploited for competitive analysis. It's crucial to choose your VPNs wisely. In today's video, I explain what happened and which VPNs are my primary choice.
youtu.be/9E4V1-UochE
Thomas J. Raef retweeted
The @bricksbuilderio team has absolutely knocked it out of the park with these security features.
I could not have thought of a better "comeback" after the patched vulnerability.
WP Vendors take note, that's how it's done.
bricksbuilder.io/release/bri…
Thomas J. Raef retweeted
Handled another site that got hacked today, but this one was a bit more sneaky than ususal, so I enlisted the help of @WeWatch it's been properly taken care off.
10/10 would recommend.
Booked Thomas to be on my @Within_WP podcast as well, btw. Should be a good one!
Thomas J. Raef retweeted
Attention!
Update your Bricks sites immediately!
**Drop everything** what you do and update your sites.
I want to highlight that the Bricks team has been exceptional in their cooperation in getting this fixed as per our recommendations.
POC in 24h.
snicco.io/vulnerability-disc…
Thomas J. Raef retweeted
I had an awesome conversation with @westguard about how to prevent SPAM from your contact forms earlier today.
I swear I learned more about the topic in this call than I have in the last 5 years!
Full explainer, recommendations and the video replay here: theadminbar.com/effective-sp…
Thomas J. Raef retweeted
🙄 Headline "TeamViewer exploited" and the first sentence starts with "TeamViewer has a history of being exploited"
True reason: users choose shitty passwords
(same for the Colonial pipeline hack btw; they used a shared password there)
hackread.com/teamviewer-expl…
Thomas J. Raef retweeted
New episode of #EmergingTech - @kathyzant chats with Timothy Jacobs from @SolidWP about all things passkeys.
Now is the Time for Passkeys in WordPress, All the Time with Timothy Jacobs
dothewoo.io/now-is-the-time-…
#security #WordPress #WooCommerce
Thomas J. Raef retweeted
I am actively looking for more #WordPress work. I can do anything related to the platform. Can my community help and repost?
Thomas J. Raef retweeted
We're doing it again. Kadence Amplify brings experts from around the WordPress community to help you create more effective WordPress sites. Check out our lineup of amazing speakers! Will you join us?
kadencewp.com/wordpress-solu…
Thomas J. Raef retweeted
The number of Facebook Messenger scams I have seen in the last month is astounding. Put a small business on the defense, slide in a sus link.
ALT Scams hitting Facebook messenger with suspicious links.
Thomas J. Raef retweeted
Did you hear? We're sponsoring #WCUS! We can't wait to see you there, and at the Pride Party!
us.wordcamp.org/2023/sponsor… #WCPrideParty
Thomas J. Raef retweeted
Data has been published by @WeWatch .
wewatchyourwebsite.com/how-w…
Thomas J. Raef retweeted
We investigated an #infostealer that gains persistent credential access on a victim’s machine by modifying their installed #Discord client.
Our full analysis: research.trendmicro.com/43aO…
Thomas J. Raef retweeted
You built your strategy for your community, but are you really ready to launch? Check out @MissElisaS latest installment in the series on community that discusses key steps to take to launch a community successfully.
mathventurepartners.com/blog…
Thomas J. Raef retweeted
Why is the US still such a hotbed of credit/debit card fraud? An NYU analysis of the card data stolen from cybercrime megashop BriansClub (no affiliation) has some very interesting findings and unparalleled ground-truth data krebsonsecurity.com/2020/07/…
Thomas J. Raef retweeted
New blog post: Read about our investigation of web shell attacks, which allow adversaries to run commands and steal data from vulnerable or misconfigured Internet-facing servers, or to use the compromised servers as launch pads for further attacks. msft.it/6011TZLsR
Thomas J. Raef retweeted
The famous "act of war" escape clause. Check your cyber insurance! Or better yet, get your cyber defense act together.
Zurich Insurance refused $100m insurance claim by Mondelez from Russia's NotPetya attack, b/c of exclusion of "hostile or warlike action" by a state. Going to court now in Illinois (home of Zurich NA) ft.com/content/8db7251c-1411…
Thomas J. Raef retweeted
When you try to help someone with their messed up #WordPress site and see 47 updates that need to be done...
Thomas J. Raef retweeted
Using the computing power of Google to defeat Google, noice
This projet defeat ReCaptcha with 91% accuracy 🤩. How? You might ask. They ask for the audio challenge, dl the mp3, forward it to Google Speech2Text API and submit the answer back... and it works 🤦🏻♂️ buff.ly/2CO6s7V
