Updates on CyberSecurity, WordPress and what we're cooking in the lab today.

This is a public service announcement from the Wordfence team regarding a security issue that has a wide impact. During the past 3 months, eight Chrome browser extensions were compromised and the attacker used them to steal Cloudflare credentials and serve up malicious ads....read more

Recently, the Wordfence team has seen ransomware being used in attacks targeting WordPress. We are currently tracking a ransomware variant we are calling "EV ransomware." The following post describes what this ransomware does and how to protect yourself from being hit by this attack....read more

This post is a continuation of the WordPress Attack Report series we've been publishing since December 2016. Reports from previous months can be found here:...read more

We have seen a significant increase in the number of websites affected by malware we refer to as 'TrafficTrade'. This malware is a piece of javascript that an attacker drops into your website content once they have compromised it. Your visitors are then redirected to websites that install malicious browser plugins or serve up spam advertising....read more

When choosing a firewall for your WordPress website to protect it against attacks, you have a handful of choices. Wordfence is one of the only effective "endpoint" firewalls available. The alternative is a "cloud" firewall from vendors like Sucuri (now owned by GoDaddy) and Cloudflare....read more

Last week our team attended Black Hat and DefCon in Las Vegas, two of the biggest information security conferences on earth. DefCon alone attracts approximately 20,000 information security professionals, researchers, government employees and fans. To say it is very busy is an understatement....read more

Hacking Made Easy Several years ago, web publishing company Interconnect/IT released a handy tool for finding and replacing text in a website's database. This tool, a stand-alone file published as searchreplacedb2.php, includes built-in WordPress compatibility that makes working with WordPress databases a breeze....read more

Today our team is launching a very exciting program at Gravityscan: a free trust badge program for your website that comes with daily security monitoring. You can find the full announcement on the Gravityscan blog....read more

Wordfence is highly effective at securing your website in part because it is tightly integrated with the WordPress API. We know your visitor identity information, so we can make smart decisions about who gets access and who gets blocked. It's very different from the way generic firewalls work....read more

Today's post is a continuation of the WordPress Attack Report series we've been publishing since December 2016. Previous months' reports can be found here:...read more