PHP

(get it in RSS or Atom)

Lifting the lid on the Redkit exploit kit

by Fraser Howard on May 3, 2013 | 6 Comments

In the first of a two part series, Fraser Howard takes a closer look at the Redkit exploit kit.

Learn more about how this kit works and the compromised web servers that are being used to host it.

DHS website falls victim to hacktivist intrusion

by Paul Ducklin on January 7, 2013 | 6 Comments

Hacktivist group NullCrew recently announced a succesful intrusion against a website in the DHS.GOV domain hierarchy.

It looks as though the site was vulnerable to what's known as a directory traversal vulnerability.

Monday review: the hot 26 stories of the week

by Anna Brading on October 1, 2012 | Leave a comment

Here's a list of all the stories we've written in the last week, in case you missed any (or if you just want to read them again).

SourceForge serves up malware-infected phpMyAdmin toolkit

by Paul Ducklin on September 27, 2012 | 3 Comments

Being careful where you download from isn't always enough.

SourceForge, the hosting service for phpMyAdmin, has disclosed that the official phpMyAdmin 3.5.2.2 distribution was Trojanised some time last weekend.

Large percentage of websites vulnerable to HashDoS denial of service attack

by Chester Wisniewski on December 28, 2011 | Leave a comment

Researchers in Germany have disclosed a vulnerability in most web programming languages that allows for a denial of service attack to be successful with very little resource and against the vast majority of websites

Unpatched WordPress installations rife with malware

by Chester Wisniewski on July 6, 2011 | 11 Comments

The latest WordPress release is requiring users to update their PHP and MySQL installations to newer releases. Are WordPress users doing enough to protect their blogs? Does it make a difference if you patch?

WordPress plugins Trojanised, spotted, fixed

by Paul Ducklin on June 22, 2011 | 7 Comments

WordPress just announced that the source code for three plugins for its popular blog-hosting platform had been Trojanised. Fortunately, the malicious changes have now been removed. Find out what happened and how to fix it.

PHP 5.3.6 released - Fixes 5 security flaws

by Chester Wisniewski on March 19, 2011 | 1 Comment

The PHP Group has released a set of bug fixes and security udpates to their ubiquitous PHP software. Web administrators should read through the change logs and update as soon as possible. Read the article to find out about the security related fixes and enhancements in PHP 5.3.6.