I am the head of a small, talented web team. We’ve been building websites since 2005. We’re smart and savvy, but we aren’t experts in everything related to websites. Nor can we be—there are too many technologies for us to use them all, and the rap...

Exciting work is being done with regards to the WordPress auto-update system that allows the WordPress team to sign each update. That signature can be verified by each WordPress installation to guarantee you're installing the actual WordPress update an...

Wordpress Security | Guide 1 | Username, Login Attempt, Update, Plugins  (note ; copy and paste of these articles is strictly prohibited) ... (more…)

This is the story of how I failed to proactively prevent every WordPress blog on the Internet from ever being conscripted into a Mirai-like… (more…)

WordPress sites that haven't been updated to the most recent version, v4.7.2, released last week, are under attack as four hacking groups are conducting mass defacement campaigns.