Black Hole Exploit Kit 2.0 Released

Security Vulnerability

If you’re not aware, there are number of kits available to crackers intent on causing your website harm. And NO, not all crackers are created equal. There are those that are developing and creating their own infections and then there are those that leverage the infections being developed. Today, one of the most prevalent kits…

Read More

WordCamp Baltimore 2012: WordPress Security Panel

Tony Perez WordCamp Baltimore 2012

This weekend I’ll be jumping on a jet plane again — this time to WordCamp Baltimore 2012 happening September 8 at the Maryland Science Center. I’ll be joining my business partner Dre Armeda and development partner Brad Williams for a WordPress Security panel, where we’ll be answering YOUR questions about security, WordPress, and keeping your…

Read More

Java Zero Day: Two Vulnerabilities

Security Warnings

Yesterday was an interesting one for the security world, it was a buzz over the new Java 0-Day and today is no different. It turns out however that it’s not just one (1) zero-day, it’s two and they were introduced back in July of 2011. We shared our initial thoughts on the vulnerability yesterday. Today…

Read More

My New OSSEC HIDS Book

Security Book

Pretty excited, today I got my very own copy of the OSSEC Host-Based Intrusion Detection (HIDS) Guide in the mail. If you haven’t heard about it, it was developed a few years back and was founded by our founder at Sucuri, Daniel Cid. Its core features include:

Read More

Uninstall ModSecurity & WordPress Challenges

Uninstall Modsecurity WordPress Challenges

Ok, as simple as a post as this might appear I recently undertook an effort to install and configure ModSecurity on my little server. In the process I quickly learned a number of things, specifically that I needed to uninstall from my production box and push it over to a staging box. I’m not a…

Read More