Understanding CVE-2025-12367: Enhance Server Security The recent discovery of CVE-2025-12367 reveals a serious vulnerability in the SiteSEO plugin for WordPress. This flaw could grant unauthorized access to authenticated users. Overview of the Vulnerability Versions up to 1.3.1 of the SiteSEO plugin are affected by a Missing Authorization issue. This vulnerability allows attackers with Author-level access […]

Introduction to Server Security Risks As cybersecurity threats continue to evolve, system administrators and hosting providers must stay vigilant. Recently, a vulnerability labeled CVE-2025-11928 emerged, primarily affecting the CSS & JavaScript Toolbox plugin for WordPress. This vulnerability allows authenticated attackers to launch Stored Cross-Site Scripting (XSS) attacks, highlighting an urgent need for enhanced server security […]

Understanding CVE-2025-12367: Enhance Server Security The recent discovery of CVE-2025-12367 reveals a serious vulnerability in the SiteSEO plugin for WordPress. This flaw could grant unauthorized access to authenticated users. Overview of the Vulnerability Versions up to 1.3.1 of the SiteSEO plugin are affected by a Missing Authorization issue. This vulnerability allows attackers with Author-level access […]

Introduction to Server Security Risks As cybersecurity threats continue to evolve, system administrators and hosting providers must stay vigilant. Recently, a vulnerability labeled CVE-2025-11928 emerged, primarily affecting the CSS & JavaScript Toolbox plugin for WordPress. This vulnerability allows authenticated attackers to launch Stored Cross-Site Scripting (XSS) attacks, highlighting an urgent need for enhanced server security […]

After the “Hello, Peppa!”  zero-day botnet, our Attack Vector Miner detected another zero-day vulnerability.  Some vulnerable websites contain an /ept/out.php file, which can work as an open proxy. That’s why the attacker scans the /ept/out.php file. Let’s see an example:  The number of these attacks started to increase on July 11th, and as we can see in the diagram below, the botnet’s activity is slowing down […]

Our Attack Vector Miner (based on AI) is a very effective tool to identify 0. day attacks. Here comes the first catch! Discovery of a New Botnet At the beginning of July, our Attack Vector Miner created a new cluster, filled with logs about a new type of botnet. We perceived the first incident on […]

In the preceding articles, I’ve talked a lot about the BitNinja safe minimum ruleset template and how you should enable it on your “/” location (or on “*/wp-admin/*” if needed) if you’re hosting mainly WordPress websites. So I’d like to give you a little more explanation about the rules that are part of the safe […]

Content Management Systems (CMS) are highly vulnerable to zero-day attacks recently. Lately, the Drupal was picked on by the hackers. Now the ModX CMS is in the target. CVE-2018-1000207: The new MODX vulnerability Two critical vulnerabilities have been found in MODX Revolution <= 2.6.4 in the past few days. Exploiting it, the hackers can remote […]

We are checking in with an unusual article. We would like to share an upcoming story about a great Journey, which will start on 28th of July. Why is it worth mentioning? Well, one member of this great Adventure is one of our Ninjas, and we’re really proud of him. They will travel around Northern […]

Artificial Intelligence (AI) is spreading quickly in many industries, and we can gladly announce the Attack Vector Miner, one of our latest developments based on AI. But before we tell you more about that, let’s get a bit more familiar with AI. If you’re an AI expert, know everything about it, and are only curious […]

Last time we finished off with the advice that if you’re hosting mainly WordPress websites, you should only enable the BitNinja Safe Minimum ruleset for the “/” location or any other domain pattern that contains “/wp-admin”. So let’s talk a bit more about domain patterns With the BitNinja WAF, we’d like to give you the […]

New LogAnalysis with 109x speed The former version of SenseLog (which serves our robust LogAnalysis module) has processed the files at the start and observed them if there were any changes in them. It has used a lot of sources for the dates in the log rows. In this version it was necessary because SenseLog […]

A new flaw on the horizon! A new flaw has been discovered in phpMyAdmin, in which an attacker has the possibility to include files on the server. This vulnerability is caused because of a portion of a code where the pages are redirected and loaded in phpMyAdmin. Here are the steps, how it can be […]

Why CVE-2025-11833 Matters to Server Admins The recent discovery of CVE-2025-11833 has raised significant alarms in the cybersecurity community. This critical vulnerability impacts the Post SMTP plugin used by WordPress. It allows unauthenticated attackers to access sensitive information, potentially leading to account takeover. Understanding the Threat CVE-2025-11833 is rated with a severity of 9.8 on […]

Introduction The cybersecurity landscape is constantly evolving, and vulnerabilities like CVE-2025-62275 highlight the need for robust server security. This specific vulnerability affects various versions of the Liferay Portal, exposing them to potential data leaks and unauthorized access. As system administrators, understanding such vulnerabilities is essential to protect your infrastructure. Understanding the Threat CVE-2025-62275 presents a […]

Introduction to CVE-2025-11922 The recent discovery of CVE-2025-11922 highlights a significant vulnerability within the Inactive Logout plugin for WordPress. This flaw impacts all versions up to and including 3.5.5. The vulnerability stems from inadequate input sanitization, enabling attackers with subscriber-level access to inject harmful scripts. What's the Threat? CVE-2025-11922 allows authenticated attackers to exploit the […]