Websites
This Plugin Could Put Your WordPress Site At Risk
The WP HTML Mail plugin has been installed on more than 20,000 websites. If you’ve built a WordPress site for your business and you use that plugin, be aware that you are at risk. A high severity security flaw was recently discovered in the plugin that could allow an attacker to perform a code injection style attack that allows the attacker to send phishing emails to the site’s registered users.
Read MoreUpdate Your All In One SEO Plugin For Security Patch
Do you own and operate a WordPress website? Do you also use the “All in One” SEO plugin?
If you answered yes to both of those questions, then be aware that you’ll want to update that plugin as soon as possible.
Recently security researcher Marc Montpas from Automattic Security discovered and reported a pair of critical security flaws.
These flaws put any website using the non-upgraded version of that plugin at risk.
Read MoreHackers Turn To New Trick Called SEO Poisoning
Hackers have a new tool in their toolbox you should be aware of. Called SEO Poisoning or sometimes “search poisoning” the attack relies on Black Hat SEO techniques to optimize web content.
Researchers from Menlo Security have spotted two separate campaigns one linked to the SolarMarker backdoor and the other leveraging REvil ransomware to infect unsuspecting netizins.
Here’s how the attacks work…
Read MoreDNS Issue Caused Major Website Outage
The Akamai Corporation reported a major outage on Thursday (7/22/2021) that caused major disruptions on the internet in the United States for a period of several hours. A tweet from the company confirmed that the outage was caused by a software update. The update triggered a bug in the DNS system which caused the outage.
The good news is that the outage was not the result of a hack as had initially been feared.
Read MoreMicrosoft Edge Browser Getting Automatic HTTPS Web Security Feature
The latest version of Microsoft’s new Chromium-based Edge browser will follow in the footsteps of the other major browsers on the web.
As of Edge 92, the browser will automatically switch users to a secure HTTPS connection when visiting an HTTP address, provided that the browser enables the Automatic HTTPS feature.
It’s a good move that’s been in the company’s development channel for some time, but it was only very recently that the company finalized and announced an official roll out date.
Read MoreMicrosoft Edge Will Redirect Users to HTTPS Secure Sites
If you’re a Microsoft Edge user, be aware. Beginning in July, with the release of Edge 92, the browser will automatically redirect users to a secure HTTPS connection any time they visit a website via the HTTP protocol.
Microsoft is not alone in this, and in fact, is coming a bit late to the party. Chrome 90, released earlier this month, already does the same thing, as does Firefox 83.
All of this is a result of, and a response to, a number of high profile man in the middle attacks last year.
Read MoreHTTPS Becomes Default For Google Chrome For Added Security
For the last month or so, Google has been testing the notion of using HTTPS as the default protocol for all URLs a user types into the address bar. Those who have been experimenting with Chrome’s latest Canary build have already seen the new feature in action, and the company has decided to forge ahead.
In the next stable release, it will be formally incorporated into Chrome’s browser experience.
Read More