"Why would hackers go after my website, it's just a brochure site?" I'm asked this often. Hackers who set up phishing attacks are looking for websites that are not blacklisted. Here is a phishing attack email I received this morning: It…
A significant number of my clients are entrepreneurs who are in the early stages of coming to grips with “I can do anything but I can no longer do everything.” They are torn between wanting to maintain their website themselves…
I want to alert you to an emerging threat to your WordPress website and what you need to do about it. For lack of a better term, this threat is being called WordPress Plugin Supply Chain Attack. It goes something…
We received notification this morning that one of the WordPress plugins used by several of our clients had been updated. A quick review of the plugin’s release notes revealed that a cross-site scripting (XSS) security vulnerability had been discovered and…
I recently received an email from a friend. He fortunately has the free version of Wordfence installed on his website. Wordfence sent him this alert: An admin user with the username backup was created outside of WordPress. He forwarded the…
Short-But-Technical Version: If you have elements like onmouseover, onmouseout, and onclick in IMG tags in your text widgets they will get stripped out when you update your WordPress to version 4.8. Long Version: In WordPress version 4.8, the text widget…
Imagine getting a call from one of your customers. She tells you that your website infected her computer with a virus and now the virus is holding her files for ransom. The answer is a good firewall and daily scans…
This week I’ve been asked by two clients to add password-protected membership areas to their websites. In one case, the client wants to create a members-only area containing paid content. In the other case, the client wants a highly secure…
An evil phishing worm masquerading as "Google Docs" is roaming the internet. It sends you an e-mail claiming to be from a friend or relative who wants to share a document with you. Clicking on the "Open in Docs" button asked you…
I’m a ‘Preventer’ As I get off the phone with another person with a busted website, I’m reminded of Liam Neeson’s line in the movie ‘Taken’ when he’s explaining what his government job was. I’m a Preventer. I prevent bad…