What’s the Issue? Some users running Imunify on Plesk servers with Ubuntu 24.04 may have encountered errors during recent updates: Turns out the updates are signed with an older DSA1024 key and Ubuntu 24.04, understandably strict about cryptography, isn’t having it. Let’s be real, things slip through the cracks. Cryptographic standards evolve, and if you’re […]

The Handy-Lightbox plugin for WordPress is widely used to enhance image displays. However, it has recently come under scrutiny for a critical Remote Code Execution, RCE vulnerability. This RCE WordPress vulnerability, allows attackers to control web servers running this plugin. In this article, we will explore the nature of this vulnerability, its implications, and how […]

What’s the Issue? Some users running Imunify on Plesk servers with Ubuntu 24.04 may have encountered errors during recent updates: Turns out the updates are signed with an older DSA1024 key and Ubuntu 24.04, understandably strict about cryptography, isn’t having it. Let’s be real, things slip through the cracks. Cryptographic standards evolve, and if you’re […]

The Handy-Lightbox plugin for WordPress is widely used to enhance image displays. However, it has recently come under scrutiny for a critical Remote Code Execution, RCE vulnerability. This RCE WordPress vulnerability, allows attackers to control web servers running this plugin. In this article, we will explore the nature of this vulnerability, its implications, and how […]

We are so proud and excited to announce that BitNinja team is one of the eight selected startups in Cyber London’s second accelerator programme. It has been a long-awaited goal of us which is a perfect opportunity to rise BitNinja to the next level. It means lots of passionate work, helpful mentorship and a dynamic environment to […]

2015 was a big year both for our team and for you who use BitNinja on your servers to make the Internet a safer place. We are so proud of our community, full of committed and passionate hacker hunters. A lot has happened this year and now, nearing the end of it, it feels good […]

Mystery is on the horizon, ladies and gentlemen! And we always get excited about unappreciated server attacks. Just like in case of this ‘abdulkarrem’ one. Come, put on the role of Sherlock Holmes with us. Recently, there is a very frequent attack type. More and more sysadmin experience and complain about malicious request like these: […]

BitNinja has two very efficient detection modules. Log analysis and DoS detection does a great job in filtering attacks, but they are lack of one very important thing. Log analysis can only work on requests already reached your server. There are attacks like login brute force attacks, where it is not a problem as there […]

Our Ninja Lab is always full of fantastic ideas and improvements. Sometimes it’s an easy ride to develop a terrific feature, sometimes it takes longer to find the right recipe. Yes, you guessed well, we are talking about the web application firewall module. But thanks to our enthusiastic users’ contribution in development and to our […]

HostingCon Europe was such a fun event this year and provided a way different experience for us, than being an exhibitor back in San Diego, at the global event. Fizzing atmosphere, great exhibitors, excellent organization and various visitors guaranteed our great time during this couple of days. Some warming up We are so proud to […]

We are happy to announce a long-awaited function at the BitNinja dashboard that facilitates your job to analyze attacks. The first step was to make the incident flow more transparent and clear for you. Many of you have a significant number of servers with huge traffic day by day. As you know, on average, 50% […]

We have terrific news again: BitNinja is able to directly fight against CryptoPHP malware. But what is this backdoor? And what does it do with your servers? Find out from our blog. What is CryptoPHP? CryptoPHP is a backdoor used for spamming and illegal search engine optimization (blackhat SEO) actions. This script provides remote control to […]

After BitNinja’s success at HostingCon Global, we decided to visit the ’little brother’ of this event, HostingCon Europe. Let’s meet in Amsterdam on September 22-23! (Don’t forget about the early bird discount, available until 5th September.) Also coming to the event? Write us an email and meet us there, let’s have a coffee together.

What is Canadian Pharmacy Spam? The term "Canadian Pharmacy" refers to a prolific spam campaign. This rising threat primarily promotes male-enhancement drugs and painkillers. Despite its name, this operation is neither Canadian nor a legitimate pharmacy. A Closer Look at the Spam Campaign Canadian Pharmacy spam is not tied to a stable website. Instead, it […]

In the world of cybersecurity, PHP backdoors pose a significant threat. These malicious scripts allow attackers to access and control web servers. Recently, we intercepted a spam attempt from a compromised server using a PHP mailer backdoor. Let’s explore how these attacks work and how to protect your systems. What is a PHP Backdoor? A […]

The BitNinja 3.12.2 release focuses on improving the reliability of core security modules including Malware Detection, SSL Termination, and IP Filtering. These updates aim to ensure security definitions stay current, installations complete successfully, and our filtering logic performs efficiently. BitNinja 3.12.2 Malware Detection: Fixed a blocking issue with cron signature downloads. This ensures that the […]