FireFox Zero Day Vulnerability Warning

posted on November 30, 2016 by | No comments

Update: Firefox has issued a new version, 50.0.2, that corrects this issue. Wordfence, a security site focused on WordPress.org sites, has published an emergency bulletin recommending a temporary switch to Chrome, Safari, or other non-Firefox based browser that is secure until the Firefox dev team can release an update. There is a “day zero vulnerability” that allows an attacker to control Windows systems with a high success rate affecting Firefox versions 41 to 50.  SecurityWeek reports that the vulnerability can also affect... Continue reading →

Failing to Update WordPress Plugins can Topple World Leaders

posted on April 10, 2016 by | No comments

I was amazed to read this week an analysis from Wordfence that the Panama Papers hack, the largest data breach to journalists in history, may have been caused by the failure to update a WordPress plugin. The plugin in question had still not been updated as of their original post. The papers implicated high officials in several world governments and led directly to the resignation of Iceland’s Prime Minister. Security isn’t just about firewalls, backups, and careful coding. Failure to perform... Continue reading →