Last week, millions of internet-connected everyday devices were used to perpetrate a denial of service attack on Dyn, a sort of switchboard for the internet. This internet-of-things (aka IoT) attack resulted in daylong outages on Twitter, Amazon, Netflix, and many other popular sites. We have a few suspects. Don’t forget to check out our other editorial toons!
WordPress security shouldn’t be taken lightly. When your entire livelihood is online, you should be taking every measure to make sure your site is safe. No one knows the state of WordPress security better than Sucuri co-founder Dre Armeda. Two years ago, Armeda left the company to pursue other things. Now he is back and just as passionate about web safety as ever. After being gone for two years, Armeda has fresh eyes on the industry and believes the way forward is to use external services. “If there’s already traffic on your site it’s too late. You need to stop thinking beyond the […]
In a recent article, I talked about nonces, what they are and their role in WordPress. This article stressed the importance of using nonces to help prevent XSS and CSRF attacks. Soon after that post was published I read about multiple security vulnerabilities in the extremely popular plugin W3 Total Cache. One of these vulnerabilities is the result of improper nonce validation. A nonce was not validated using the standard wp_verify_nonce() function. Instead, the nonce was validated using a == comparison. In this article, I’m going to cover string comparisons in PHP. Specifically some of the issues with string comparison, […]
Everything you need to know about WordPress news this week. Surprising WordPress Statistics: Updated for 2016, check out these interesting facts about the CMS. LoopConf 2.1: After a hurricane postponed Loopconf, the team got together to move it to a different time and location. 9 Popular Management Solutions For WordPress: Looking for a way to manage your site? Check out these easy-to-use management solutions. REST API: The REST API Content Endpoints are conditionally approved for a merge with 4.7. Should You Ever Work For Free?: Starting out as a freelance developer can be difficult and it may seem appealing to work […]
Security is ongoing discussion for WordPress site owners of all levels of technical expertise, but it can be an especially hard area for newbies to get to grips with. While security insiders are fluent in the differences between common attack vectors, it can often appear as little more than a bewildering sea of hard to grasp threats for the average Joe. In this piece, we’ll be looking to fill in some of those knowledge blanks by briefly breaking down what some of the more common threats out there are actually all about. Rather than blind you with acronyms and white papers, we’ll concentrate on […]
No Comments