Fwd: Newsletter: SQLi Vulnerability, Cryptomining Malware eBook & New Research

by kesz1 | Jan 31, 2018 | Blog

Welcome to the January edition of our Sucuri Newsletter!

This month we disclosed a vulnerability in YITH WooCommerce Wishlist, published our SiteGround case study, released a new eBook on cryptocurrency mining malware and described the evolution of the cloudflare.solutions keylogger.

SQLi Vulnerability in YITH WooCommerce Wishlist

Sucuri researchers have discovered an SQLi Vulnerability in YITH WooCommerce Wishlist which allows attackers to fully compromise web servers and obtain sensitive data.

Case Study: SiteGround

SiteGround, a popular web host, has been using Sucuri to protect its clients for the past 5 years. This case study highlights how Sucuri provides SiteGround customers with peace of mind.

Cloudflare[.]solutions Keylogger Returns on New Domains

Our senior malware researcher describes how the cloudflare.solutions keylogger malware campaign has evolved and is spreading to new domains.

Cryptocurrency Mining Malware

Our latest eBook describes how hackers and cryptocurrencies are impacting website security. Inside, researchers also discuss trends and threat predictions for 2018.

What Douglas Does at Sucuri

I’m a Tier 3 Security Analyst. My responsibilities include dealing with complex cases and escalations, contributing to the blog and lab notes, helping the team whenever they need a hand with something, and providing feedback for improvements. As side work, I contribute with custom codes whenever I have the chance.

Douglas' Fun Fact

I’m a passionate photographer and, whenever possible, I organize trips with my friends to barbecue and take landscape photographs.

I’d like to share some of my photographs with you, I hope you enjoy them as much as I do: https://500px.com/dogasantos

Douglas' Security Tip

The cost for neglecting security is 10 times greater than the effort to keep it safe. Your brand value, once scratched, takes 10 times as long to be recovered than to build it. Make sure to follow security best practices to protect your web assets.