Information security

Microsoft, responding to sophisticated cyberattacks

Andy Smart December 19, 2020 0 Comments
Microsoft is aware of a sophisticated supply chain attack that has targeted a variety of victims over the past year. The attack utilizes malicious SolarWinds files that possibly gave cybercriminals access to some victims’ networks. Microsoft cybersecurity experts are investigating the attack to help ensure that Microsoft customers are as secure as possible. Microsoft has commented "Microsoft is...
Read More
blue RollsdArtboard

WooCommerce: Spam Orders and Accounts from Bots

Alex Swabey November 09, 2020 0 Comments
Versions of WooCommerce prior to 4.6.2 contain a vulnerability that allows guest users to create accounts during checkout even when the "Allow customers to create an account during checkout" setting is disabled. This vulnerability is being exploited by a bot to place spam orders and create user accounts that are then used to probe for vulnerabilities in other plugins on the site. In response to...
Read More
Close-up of programming code on a computer screen highlighting JavaScript code

Post Grid WordPress Plugin Flaw Found “Patch it sharpish if you use it…”

Andy Smart October 13, 2020 0 Comments
Two high-severity vulnerabilities in Post Grid, a WordPress plugin with more than 60,000 installations, opens the door to site takeovers, according to researchers. To boot, nearly identical bugs are also found in Post Grid's sister plug-in, Team Showcase, which has 6,000 installations. The issues are a cross-site scripting (XSS) flaw as well as a PHP object-injection issue. Both bugs are pending...
Read More
a person login a form on a desktop

Analytics and Web App Confusion as Privacy Shield Lies in Tatters

Andy Smart July 17, 2020 0 Comments
Before the world changed due to COVID-19, the GDPR (General Data Protection Regulations) came into force back in 2018.  This impacted businesses across all industries and implemented strict regulation on the storage and transfer of personal data, with heavy fines as punishment for non-compliance. Many cloud services, from those offered by Microsoft and Google to much smaller, niche services, are...
Read More
upgrade-today-critical-vulnerability-in-phpmailer-affects-wordpress-drupal-websites

Is your website’s front door wide open to WordPress hackers?

Chris Grant (he/him) May 08, 2020 0 Comments
It is frustrating to find out that your WordPress site has been hacked, recently one of our customers asked us why do hackers target WordPress? The answer is usually, in part at least, due to the very reason that WordPress is such a popular content management system for websites, its active developer community and the volume of free plugins and free themes available to customise your site without...
Read More
hands of hacker in dark room writing code

Cybercrime: Europe’s Most & Least Secure Countries

Chris Grant (he/him) February 21, 2020 0 Comments
Specops Software has released data showing the countries in Europe most and least susceptible to cyber crimes. The company analysed the total number of cloud provider related incoming attacks as well as cryptocurrency mining, malware and ransomware encounters on machines in each country. The Netherlands has the highest rate of machines that experienced one of the above attacks at 17.64 percent...
Read More