If you run a WordPress site, and are trying to make some money through it, think twice before installing "free" versions of premium plugins.
DNS and NTP servers are not the only publicly accessible resources that can be misused to amplify DDoS attacks.
Rublon provides automatic two factor authentication for web applications.
During an internal assessment, Duo Security found a vulnerability in their popular WordPress two-factor authentication plugin that completely bypasses the security measures provided by it.
WordPress 3.7, named Basie, is available for download or update in your WordPress dashboard.
Reading our newsletter every Monday will keep you up-to-date with security news.
Receive a daily digest of the latest security news.