What’s the Issue? Some users running Imunify on Plesk servers with Ubuntu 24.04 may have encountered errors during recent updates: Turns out the updates are signed with an older DSA1024 key and Ubuntu 24.04, understandably strict about cryptography, isn’t having it. Let’s be real, things slip through the cracks. Cryptographic standards evolve, and if you’re […]

The Handy-Lightbox plugin for WordPress is widely used to enhance image displays. However, it has recently come under scrutiny for a critical Remote Code Execution, RCE vulnerability. This RCE WordPress vulnerability, allows attackers to control web servers running this plugin. In this article, we will explore the nature of this vulnerability, its implications, and how […]

What’s the Issue? Some users running Imunify on Plesk servers with Ubuntu 24.04 may have encountered errors during recent updates: Turns out the updates are signed with an older DSA1024 key and Ubuntu 24.04, understandably strict about cryptography, isn’t having it. Let’s be real, things slip through the cracks. Cryptographic standards evolve, and if you’re […]

The Handy-Lightbox plugin for WordPress is widely used to enhance image displays. However, it has recently come under scrutiny for a critical Remote Code Execution, RCE vulnerability. This RCE WordPress vulnerability, allows attackers to control web servers running this plugin. In this article, we will explore the nature of this vulnerability, its implications, and how […]

How CAPTCHA Works CAPTCHA stands for Completely Automated Public Turing test to tell Computers and Humans Apart. It presents challenges that are easy for humans but difficult for bots. The BitNinja CAPTCHA verification page uses different types of tests to block malicious bots effectively. The Importance of CAPTCHA Verification Implementing CAPTCHA verification can significantly reduce […]

Patator was developed out of frustration with existing tools for password guessing attacks such as Hydra, Medusa, and Metasploit modules. It aims to offer a more reliable and flexible approach without merely repeating the shortcomings of its predecessors. Patator is a multi-threaded tool written in Python, designed to facilitate various types of password brute-forcing attacks. […]

Security, clarity, and efficiency remain at the core of every BitNinja update. The 3.12.0 release focuses on strengthening configuration handling, refining malware detection mechanisms, and introducing a new Web Application Firewall Pro module in beta. These changes further improve protection accuracy, while enhancing flexibility and compatibility for a broader range of environments. BitNinja 3.12.0 ConfigParser […]

The latest BitNinja 3.11.7 release brings focused improvements to configuration parsing and malware detection, further optimizing your server’s stability and scanning accuracy. These updates fine-tune internal mechanisms to better support specific control panels and streamline malware-related processes. BitNinja 3.11.7 ConfigParser: Fixed a configuration parsing issue with OpenLiteSpeed environments. This correction ensures configuration files are interpreted […]

We’re excited to announce that BitNinja will soon fully support IPv6 across our security platform. Today, BitNinja protects servers using IPv4 addresses. However, as the internet shifts towards broader adoption of IPv6, many hosting providers and system administrators are looking for solutions that can safeguard both IPv4 and IPv6 infrastructures. You've asked, and we listened! […]

BitNinja 3.11.6 brings valuable refinements across several subsystems to improve stability, communication, and firewall rule management. This update focuses on better integration, more accurate cleanup processes, and enhanced support tools for development and troubleshooting. BitNinja 3.11.6 IPFilter Fixed an issue where firewall rules could remain in IPTables after BitNinja was stopped. This change ensures cleaner […]

At BitNinja, we're committed to enhancing our security solutions for optimal server protection. The 3.11.5 release brings notable updates, focusing on malware detection improvements and file patching enhancements. These updates assist in streamlining server operations and increase overall security reliability. BitNinja 3.11.5 Malware Detection: Introduced a new CronDetector to identify miner scripts, enhancing the overall […]

What is Canadian Pharmacy Spam? The term "Canadian Pharmacy" refers to a prolific spam campaign. This rising threat primarily promotes male-enhancement drugs and painkillers. Despite its name, this operation is neither Canadian nor a legitimate pharmacy. A Closer Look at the Spam Campaign Canadian Pharmacy spam is not tied to a stable website. Instead, it […]

In the world of cybersecurity, PHP backdoors pose a significant threat. These malicious scripts allow attackers to access and control web servers. Recently, we intercepted a spam attempt from a compromised server using a PHP mailer backdoor. Let’s explore how these attacks work and how to protect your systems. What is a PHP Backdoor? A […]

The BitNinja 3.12.2 release focuses on improving the reliability of core security modules including Malware Detection, SSL Termination, and IP Filtering. These updates aim to ensure security definitions stay current, installations complete successfully, and our filtering logic performs efficiently. BitNinja 3.12.2 Malware Detection: Fixed a blocking issue with cron signature downloads. This ensures that the […]