Announcements

Joomla 3.4.5 Released Fixing a Serious SQL Injection Vulnerability

  • 27th October 2015
The Joomla team just released a new Joomla version (3.4.5) to fix some serious security vulnerabilities. The most critical one is a remote and unauthenticated SQL injection on the com_contenthistory module (included by default) that allows for a full take over of the vulnerable site.Being proactive in the protection of your site is of ...
Continue reading

Security update available for Adobe Shockwave Player

  • 27th October 2015
Security update available for Adobe Shockwave Player Release date: October 27, 2015 Vulnerability identifier: APSB15-26 CVE number: CVE-2015-7649 Platform: Windows and Macintosh Summary Adobe has released a security update for Adobe Shockwave Player. This update addresses ...
Continue reading

Security advisory: Stored XSS in Jetpack

  • 1st October 2015
Security Risk: DangerousExploitation Level: Easy/RemoteDREAD Score: 8/10Vulnerability: Stored XSSPatched Version:  3.7.1Vulnerability Disclosure Timeline: September 10th, 2015 – Initial report to Automattic security teamSeptember 10th, 2015 – Automattic security team acks receipt of report, sets patch date for ...
Continue reading

Hijacked Wordpress websites infect visitors with malware

  • 21st September 2015
Thousands of websites that run the content management system WordPress have been hijacked by hackers to infect unsuspecting visitors with malware exploits. Although the entire campaign was initiated 15 days ago, its activity has increased tremendously in the past 2 days, as the number of websites being hijacked per day increased from 1000 to ...
Continue reading