Important Vulnerability on Advanced Custom Fields Plugin for WordPress

Imunify360 has a robust set of mitigation that acts proactively against advanced attacks, and its layer works either on L7 (http request) against known vulnerabilities and also at runtime by our innovative Proactive defense module, and behind the scenes, there's a team of malware experts researching 24x7 and figuring out in-depth the malware behavior.

In today's digital era, cyberattacks have become a harsh reality, threatening the security of businesses and individuals alike. A new type of attack has emerged, known as a "web skimmer," which targets explicitly e-commerce websites, aiming to steal personal information and credit card data. The cunning use of legitimate websites as "command-and-control" servers sets this attack apart from its predecessors, enabling hackers to discreetly distribute malicious code while concealing their activities. The repercussions of such an attack are far-reaching, potentially compromising the sensitive data of thousands of unsuspecting website visitors. However, there is a solution that can provide an effective shield against these web skimmers: Imunify360.

Server security is a top concern for hosting providers, and finding ways to enhance it while also generating revenue can be a challenge. However, with the launch of MyImunify, a revolutionary addition to the Imunify security suite, hosting companies now have the opportunity to transform server security into a lucrative revenue stream and take their security game to the next level.

The recent cyber attack found by Patchstack researcher Rafie Muhammad on the "Advanced Custom Fields" plugin for WordPress is a stark reminder of how vulnerable websites can be to hackers. In this case, over two million users were at risk of cyberattacks due to a vulnerability (a flaw, tracked as CVE-2023-30777) that allowed miscreants to inject malicious code into webpages and potentially hijack administrative accounts.

With Apple’s recent release of a security update for the iPhone, iPad, and Mac, it brings attention to the critical importance of regular software updates. We’re going to explore the significance of staying up-to-date with the latest security patches and highlight the efforts of Imunify360 in enhancing their update process to deliver faster and safer protection for servers.

Cronjob is a time-based job scheduler in Unix-like operating systems, including Linux, that allows users to schedule and automate repetitive tasks. The name "cron" comes from the Greek word "chronos," which means time.

Infection of cron files is a serious threat to any Linux system that uses task automation. Hackers can use these files to regularly launch malicious programs and scripts.

Welcome to the video recording of our interactive webinar on server security. CloudLinux Technical Account Manager Eric Ellis and Hivelocity Sr System Admin Eric Lewellen provide an overview of common server security ideas and engage in a lively debate about which ones matter and which ones don't.

Companies are increasingly at risk for security breaches in 2023. We’ve seen hacks at some of the biggest companies recently – LastPast, and GoDaddy (to name a few). Join CloudLinux Technical Account Manager Eric Ellis and Hivelocity System Admin Eric Lewellen for an overview and some lively debate about some of the most common server security ideas – which ones matter and which ones don’t.

We’re pleased to announce a new version of Imunify360. Version 6.12 is now available! 

By now you’ve probably heard about the latest breach at LastPass. (Yes, I said “latest” – as in “not the first.”)

Here’s a quick recap of the latest incident: