Updates on CyberSecurity, WordPress and what we're cooking in the lab today.

Category Archive: Wordfence

Wordfence In Depth: How Malware Becomes Scan Signatures

This entry was posted in Research, Wordfence on February 16, 2017 by Mark Maunder   6 Replies

One of the most effective ways the Wordfence team keeps the WordPress community and customers secure is through something we call the 'Threat Defense Feed'. This is a combination of people, software, business processes and data. It's an incredibly effective way to keep hackers out and provide our customers with early detection....read more

Rapid Growth in Defacements, Who was Hit, Who is Attacking

This entry was posted in General Security, Vulnerabilities, Wordfence, WordPress Security on February 10, 2017 by Mark Maunder   22 Replies

Yesterday we published numbers indicating how widespread the defacement campaign is targeting the REST-API vulnerability recently fixed in WordPress 4.7.2. If you have not updated to 4.7.2 already on all sites you operate, do so immediately. If you are using Wordfence Premium, you are already protected....read more

The January 2017 WordPress Attack Activity Report

This entry was posted in General Security, Monthly Attack Activity Report, Wordfence, WordPress Security on February 3, 2017 by Mark Maunder   23 Replies

Last month we introduced a monthly attack activity report. This report gives you an indication of attack trends during the past month and how they have changed. Today we are releasing the January WordPress attack activity report which covers the period from January 1st until January 31st....read more

XMLRPC or WP-Login: Which do Brute Force Attackers Prefer

This entry was posted in Research, Wordfence, WordPress Security on January 31, 2017 by Mark Maunder   54 Replies

At Wordfence we constantly analyze attack patterns to improve the protection our firewall and malware scan provides. We recently took a closer look at brute force attack targets, specifically XMLRPC and wp-login, to gain a deeper understanding of how attackers behave....read more

Announcing Wordfence 6.3.0 – Exciting Improvements

This entry was posted in Wordfence, WordPress Security on January 26, 2017 by Mark Maunder   51 Replies

This morning I'm very excited to announce the release of Wordfence 6.3.0. This is one of our bigger releases and it includes a few exciting changes to the user interface and the way Wordfence helps you secure your site....read more

Do You Need a WordPress Security Plugin?

This entry was posted in General Security, Wordfence, WordPress Security on January 25, 2017 by Mark Maunder   13 Replies

At Wordfence we are a big team these days with millions of customers, and we think about security all day long. Sometimes we can get deep down the proverbial rabbit hole and forget about the basics....read more

Analysis: Methods and Monetization of a Botnet Attacking WordPress

This entry was posted in General Security, Research, Wordfence, WordPress Security on January 24, 2017 by Mark Maunder   28 Replies

At Wordfence we see a huge range of infection types every day as we help our customers repair hacked websites. We also find new kinds of malware as we analyze the forensic data we gather from a range of sources. Our normal day involves turning that forensic data into firewall rules and scan signatures which we deploy to your Wordfence firewall and malware scan via our Threat Defense Feed....read more

How the Wordfence Firewall Works

This entry was posted in Wordfence, WordPress Security on January 10, 2017 by Mark Maunder   37 Replies

In April of 2016 Wordfence launched a full featured WordPress firewall. Since then we have released improvements that make Wordfence faster and better at blocking attacks. If you're not a security professional it may not be clear what the Wordfence firewall does or how it works. In this post I'm going to describe exactly how the firewall works....read more

The December 2016 WordPress Attack Activity Report

This entry was posted in General Security, Research, Wordfence, WordPress Security on January 5, 2017 by Mark Maunder   52 Replies

This week we are introducing something new. At the beginning of each month we will be doing a monthly WordPress security report. We will look at the attack data for the previous month from the 1st to the end of the month and provide a report and analysis on the attack activity we have seen on WordPress websites....read more

Election Hack Report FAQ: What You Need to Know

This entry was posted in General Security, Miscellaneous, Research, Wordfence, WordPress Security on January 2, 2017 by Mark Maunder   13 Replies

On Friday we published an analysis of the FBI and DHS Grizzly Steppe report. The report was widely seen as proof that Russian intelligence operatives hacked the US 2016 election. We showed that the PHP malware in the report is old, freely available from a Ukrainian hacker group and is an administrative tool for hackers....read more

Get the latest WordPress security updates and news

Sign up for WordPress security alerts, Wordfence product updates and security news via email.