My guess: crowdstrike almost certainly tested what was *supposed* to be in that update but their distribution pipeline failed to retrieve the actual update before pushing it out and sent out an empty file, a situation they did *not* test for
Ram retweeted
🚨Alert to all WordPress users! Beware of the latest phishing scam using fake CVE-2023-45124. This scheme lures users into installing a backdoor plugin. #WordPress #WP #CyberSecurity wordfence.com/blog/2023/12/p…
Ram retweeted
Earn up to $10,000 for finding Vulnerabilities in WordPress Software. For the next 20 days, we have added a 6.25X multiplier to all bug bounties, starting NOW. These are some of the highest payouts for finding vulnerabilities in the history of WordPress. If you're a vulnerability researcher, this is your moment! wordfence.com/blog/2023/12/e…
Ram retweeted
High altitude mountaineer Ed Viesturs joined the Wordfence team over the weekend in Banff, Canada to elevate our thinking. An amazing guy with an incredible list of accomplishments. Inspirational!! Thanks Ed!!
en.wikipedia.org/wiki/Ed_Vie…
Ram retweeted
Russian Hacktivist Group Targets Political Websites with DDOS Attacks hubs.li/Q01rQb2Z0
It's been mentioned that the ssh key we're seeing is the one in the @horizon3ai deep dive. Unclear if it's theirs or the same one they're seeing. Could be naive attackers copying their payload verbatim. If it is horizon3 sending out requests I'm assuming they got permission first
5/ To learn more, read our full blog post here:
wordfence.com/blog/2022/10/t…
I didn’t want to post yesterday in anger. I don’t post much on main. But yeah I’m still angry and sad, and also scared because the vector they chose was eliminating the right to privacy. maybe I don’t personally have to worry if I keep my head down, but people I care about do
Ram retweeted
A bunch of my @wordfence instructor videos just went live! Check 'em out :D
youtu.be/NLswn9SkNY0
youtu.be/tGxcupi2DSA
youtu.be/9mtGKVZcZAU
youtu.be/JnThqkQmPlY
youtu.be/R4LvLwN3n1A
youtu.be/HooAu1EIKcI
Hey everyone we're hiring, and we're *never* going "back" to the office (because we were never there in the first place)
defiant.com/employment/
We found this and disclosed to Elementor on March 29. It's...pretty bad. Fortunately we haven't seen anyone trying to actively exploit this yet.
Critical Remote Code Execution Vulnerability in Elementor hubs.li/Q0181vTg0
My guess is that host's abuse department is probably a little busy at the moment - wars have a way of bringing opportunists out of the woodwork. The silver lining is that approximately no one is vulnerable to this.
Not worth a post, but interesting anomalous behavior: 194.38.20.161 in Ukraine attacked 1,739,993 #WordPress sites over the weekend targeting a 2016 vulnerability in this plugin with less than 10 active installs: wordpress.org/plugins/wp-pos…
Ram retweeted
Reflected Cross-Site Scripting Vulnerability Patched in WordPress Profile Builder Plugin hubs.ly/Q014m-cL0
Ram retweeted
We're incredibly excited to announce the launch of two new products, Wordfence Care and Wordfence Response. Check out our fun animation below which explains our newly expanded product lineup. You can find the full announcement on our blog:
wordfence.com/blog/2022/02/w…
In case you've been wondering what we've been working on for the last while:
We're incredibly excited to announce the launch of two new products, Wordfence Care and Wordfence Response. Check out our fun animation below which explains our newly expanded product lineup. You can find the full announcement on our blog:
wordfence.com/blog/2022/02/w…