About 4,000 WordPress websites have been infected with malware that disguises itself as a search engine optimization plugin to attract unwary webmasters. (more…)

Oh, how easily we forget the WordPress of 10, 15 years ago. We are spoiled. We are spoiled by the gluttony of documentation and tutorials, a wealth of knowledge created over more than a decade. We … (more…)

Identifying, mitigating and analysis WordPress "Pingback" Reflective DDoS attacks on production frontend hosts... (more…)

I have just released version 0.6 of the GraphQL API for WordPress 🎉. (more…)

This series of blog posts explores the performance implications of populate WordPress plugins. First up is the security plugin Wordfence. (more…)