SQL injection, also known as SQLi, is a technique that targets websites and apps using SQL databases. It works by inserting SQL code into a website’s input fields to gain access to sensitive information, including customer records, intellectual property, and personal data. Any app (web, desktop, or mobile) that uses SQL databases and processes data […]
Tag Archives: Website Security
SEO Spam Removal: Protect Search Rankings Before Blocklists Do
SEO spam used to be just annoying, but now it’s a huge moneymaker for organized crime. These groups are pushing fake meds, illegal gambling, and malware. The second they find a weak spot, they sneak in hidden links, crank out fake pages, and then disappear. You’re left with your organic traffic tanking, browser warnings, and […]
Product Update – New Backups Platform
Sucuri is pleased to announce the completion of a product upgrade with our new Backups platform. For those already subscribed to our Backups platform, you will begin to see (over the next week or so), a new destination for where to access your new Backups. For those who have never purchased our Backups before, you […]
Understanding SSRF: Abusing Server Trust from the Inside Out
In our daily interactions online, trust is a fundamental currency. We trust servers to handle our data, process our requests, and reliably deliver content. But what happens when that trust is abused and turned against the server itself? What if an attacker could trick your server into becoming an unwitting accomplice, abusing its privileged position […]
What Motivates Website Malware Attacks?
The depiction in the media of hackers tends to be that of balaclava-wearing villains who type furiously in a dark basement, motivated by nothing but evil intentions. However, while this may be true in some instances, by and large the determining factors that result in malware attacks are largely motivated not by ideology or malice […]
90 Days to Shine: Why Sucuri’s SSL Certificates Are Living the Short Life (and Why That’s Awesome)
Picture this: your SSL certificate is like a carton of milk in your fridge. Sure, it’s good for a while, but let it sit too long, and you’re inviting a sour situation. At Sucuri, we’ve decided our certificates deserve a fresher approach—90 days fresh, to be exact. That’s right, we’re now renewing our SSL certificates […]
Understanding CSRF: Cross-site Request Forgery Explained
Cross-Site Request Forgery, often called CSRF (or its other nicknames, Session Riding and XSRF), is a tricky type of attack. In short, it lets attackers make users do things on websites without their consent or knowledge. This attack works by misusing the trust a web application puts in a user’s browser once they’re logged in. […]
Vulnerability & Patch Roundup — April 2025
Vulnerability reports and responsible disclosures are essential for website security awareness and education. Automated attacks targeting known software vulnerabilities are one of the leading causes of website compromises. To help educate website owners about potential threats to their environments, we’ve compiled a list of important security updates and vulnerability patches for the WordPress ecosystem this […]
MTR For Website Troubleshooting
Let’s set the scene: You go to visit a website and you get a “connection timed out” error. Is this a browser, internet, firewall, or hosting server issue? How do I know who to contact to get the issue resolved? Should I use ping, traceroute, or an MTR to get to the bottom of the […]
Easy Guide to Saving HAR Files and Console Logs for Troubleshooting
When something goes wrong with a website – whether it is a broken design, slow performance, shows an error message or something else, it is sometimes difficult to find the exact cause of the issue just by looking at the page. That’s where the HAR files or browser console errors come into play. These in-built […]
