This site uses cookies in accordance with our Privacy Policy.
Wordfence Research and News
Newest
Episode 124: PrintNightmare 0Day Exploit Accidentally Leaked Online
Security researchers accidentally leaked zero-day exploit code for a new Windows bug, now called PrintNightmare, while easily exploitable vulnerabilities in the ProfilePress plugin, previously called WP User Avatar, were patched quickly. An unprotected cloud database containing over 814 million DreamHost user records was found online. Google Chrome is getting a HTTPS-only feature in an upcoming …
Read More
Episode 120: Jetpack Autoupdate Security Patch Bypasses Local Settings
A security fix for an information leak vulnerability was pushed out to WordPress sites using Jetpack that bypassed local settings preventing autoupdates.
Podcast 117: Cyber Attack on Colonial Pipeline Affects Fuel Availability in 17 States
A ransomware attack on Colonial Pipeline affected fuel availability in 17 southeastern US states, and Bloomberg reported that Colonial Pipeline paid $5 million to DarkSide, a Russian ransomware service provider.
Episode 114: Trifecta of Compromises Affect Enterprise Systems
Attacks on unpatched SolarWinds systems continue. We’re now learning of a supply chain attack that started in late January 2021 affecting 29,000 customers of Codecov, as well as a zero-day under active attack affecting customers of PulseSecure VPN.
Episode 111: PHP Git Repository Compromised
The self-hosted Git repository for PHP was compromised, with attackers adding a backdoor to a development version of PHP 8.1.
Episode 109: This Attack Will Make You Want to Stop Using SMS 2FA
An attack shows how a SMS enablement service was used to bypass SMS 2FA for $16.
Episode 105: The Hottest Trend in WordPress
An analysis of WordPress-related search trends found that interest in WooCommerce related results dominated during 2020.
Episode 103: Wordfence Innovates with Machine Learning and Security for Schools
Wordfence opens the K-12 site audit and site cleaning service for publicly funded state schools worldwide.
Episode 102: Disruption Presents Opportunity
After a disruptive year in 2020, there are new challenges in 2021, but also immense opportunities in numerous fields.
Announcing Free Site Cleaning & Site Security Audits for K-12 Public Schools
Update February 2, 2021: We are now expanding this program worldwide to include all public/state-funded schools serving students in K-12 programs (or the like) around the world.
Breaking WordPress Security Research in your inbox as it happens.
