Important Vulnerability on Advanced Custom Fields Plugin for WordPress

To celebrate Cybersecurity Awareness month in October, we planned a special webinar to cover everything you need to know about how to protect your servers against unknown threats, specific types of attacks you may not know about, and why it matters more now than ever.

Join us on Tuesday, October 18 at 11 am EST / 5:00 pm GMT+2  for a conversation with Arianna Della Valle about her server security journey with hosting company Netsons. She’ll share the challenges Netsons faced, why change was critical, and how she’s been able to increase both productivity and profits.

September was a busy month at Imunify360. Check out our latest news, upcoming webinars, and recent release notes. 

We are happy to announce that we made some significant protection improvements for the cases when different protection modules work in cooperative mode.

We’re pleased to announce a new version of Imunify360. Version 6.7 is now available. The following features are new in the v6.7 release:

Infection description

On Sep 15, we detected a malicious campaign. It was evident that the attackers we discovered were using phishing techniques to trick users into downloading a malicious binary file. They used a fake message on websites stating that a user has been blocked by Cloudflare. Meanwhile, infected websites getting the message would not necessarily even use Cloudflare services.

We’re pleased to announce a new version of Imunify360. Version 6.6 is now available. The following features are new in the v6.6 release:

Infection description

Starting on Jun 29, we detected a malicious campaign that uses Crontab in a chained infection flow. A closer look reveals a common pattern attackers use in order to inject a backdoor to a vulnerable host.

It starts from logging in with previously stolen credentials to the cPanel service. After that, the attacker makes an attempt to upload a backdoor directly to the public directory. And the final step is to set up a CronJob task, containing obfuscated malware, scheduled to trigger every at regular intervals.

Is your server security bullet proof? Could you benefit from a fully automated system that prevents malware and mitigates cyber attacks?

Join hosting security guru Eric Ellis this Friday at 1 pm EST to hear how others are using Imunify360 to secure their servers so they can focus on scaling their business.

To speed up and improve your experience on your favorite Linux server security suite, the Imunify360 team focused on performance improvements and optimizations in July. Also you’ll see new feature releases starting from the first week of August. Stay tuned on the Changelog page for chronological updates.

But wait… There’s more… 

We’re pleased to announce a new version of Imunify360. Version 6.5 is now available. The following features are new in the v6.5 release:

• WebShield improvement
  In this release, we present a new and improved WebShield. Starting from version 6.5, WebShield will work faster and consume even fewer resources. We improve performance by running WebShield as a pure Nginx module.

• Language support for SplashScreen
  Version 6.5 broadens the set of languages supported by our SplashScreen.