The New York Times reports today that 1.2 billion usernames and passwords were grabbed by Russian hackers using a botnet that exploited SQL injections to gain access to the data. Check out the article here. In truth, some of those were duplicates, so it's more like half a billion, but hey... what's ...Read More...

We are sorry to report yet another WordPress vulnerability. This one has already effected some 50,000 websites and comes to you through the plugin called MailPoet which allows hackers not only to enter and abuse your website, but also to use that entry point to access any other websites on shared accounts ...Read More...

One of our customers clicked the other day. The result was a minor disaster that cost significant time and money. In that case, it was done by accident, but it turns out that others do it with full knowledge of their actions. Despite all the internet security warnings that IT experts provide on a ...Read More...

We regularly alert you about updating your canned software like WordPress and others, but if you haven't been keeping up with your installations lately, it's time to take another look. This weekend, the makers of the All in One SEO Pack (19 million downloads) announced an update that you must make to ...Read More...

Your Internet security starts with you! By now, either personally or through a friend or co-worker, you have probably learned that it's way too easy to be compromised by a hacker or get a virus or acquire popup ads that seem to take over your computer. The range of exploitation can be as benign ...Read More...

These warnings are becoming all too frequent lately, but here's another one for you. Microsoft announced this week a vulnerability in all versions of their IE web browser. If you use Internet Explorer, you must now be even more careful than normal not to click on anything that might lead you to a web ...Read More...

Many of you have asked about whether we are aware of the discovery of an SSL security issue called Heartbleed effecting OpenSSL that was revealed on Monday and whether we are or were vulnerable to any compromises as a result of it. As it turns out, a vulnerable version of the software was only present ...Read More...

The bad guys really are out there. They hammer away on web servers all over the world, day and night looking for a way to exploit the inattentive and the unaware. They try to lure you into clicking an email link or opening an attachment or otherwise infecting your PC with malware. To avoid becoming ...Read More...

The latest in a series of exploits of websites for bad intent comes to the world wide web courtesy of Joomla. The latest version, 3.2.3, is available now and fixes a critical SQL injection vulnerability, two medium priority XSS bugs and an unauthorised login bug. We recently had a web hosting client ...Read More...

Many of our web hosting clients use our robust Build111 CMS (content management system) for their web sites, but some of you use WordPress as your CMS. If you are running an older version of WordPress (before the Jan-2013 3.5.1 update), please be aware that your site can be used to run DDoS attacks ...Read More...