Stop “content sniffing” with HTTP security headers
Browsers try to be helpful. If your server doesn’t clearly label a file, they may…
Security Matters
Expert insights and updates to help organisations strengthen their digital defences.
From WordPress vulnerabilities to secure file transfer and plugin risk management, Security Matters supports a proactive approach to online security.
Auto-login backdoor disguised as a JavaScript data file in WordPress
A stealthy backdoor is targeting WordPress sites by posing as a harmless JavaScript asset. In…
Phishing threats: how to protect your WordPress site and your business
Phishing has evolved from clumsy “verify your account” emails into polished scams that mimic real…
ERR_TOO_MANY_REDIRECTS: how to fix redirect loops on your website
Seeing ERR_TOO_MANY_REDIRECTS (or “the page isn’t redirecting properly”) means your site is stuck bouncing between…
Denial-of-Service (DoS) attacks: what they are and how to keep your website available
If your website slows to a crawl, pages time out, or customers can’t log in,…
501 errors on your website: what they mean and how to fix them
If you’ve seen a “501 Not Implemented” message, your server is telling the browser: “I…
Malvertising hiding in plain sight on WordPress websites
We’re seeing a malvertising campaign that quietly injects third-party scripts into WordPress sites. It looks…
Secure your file transfers: why SSH keys beat passwords for SFTP
If your team still uploads website files over SFTP with a username and password, you’re…
Hidden backdoors creating WordPress admin accounts
We’re seeing a wave of stealthy backdoors on compromised WordPress websites that quietly create administrator…
Malicious “WordPress Player” plugin: how covert redirects hijack your site
Some WordPress sites are seeing visitors land normally and then—after a short pause—being whisked away…