Understanding the CVE-2025-11820 Vulnerability The cybersecurity landscape continues to challenge hosting providers and server administrators, especially with vulnerabilities like CVE-2025-11820 in the Graphina Elementor Charts and Graphs plugin. This vulnerability opens doors for potential attacks, making it crucial for users to understand its implications and mitigation strategies. What is CVE-2025-11820? CVE-2025-11820 describes a Stored Cross-Site […]

Enhancing Server Security in 2025 As cyber threats evolve, system administrators and hosting providers must continuously update their security practices. The recent CVE-2025-11987 incident is a stark reminder of the vulnerabilities that WordPress plugins can expose. This incident highlights the critical need for effective server security measures. Understanding CVE-2025-11987 The Visual Link Preview plugin for […]

Understanding the CVE-2025-11820 Vulnerability The cybersecurity landscape continues to challenge hosting providers and server administrators, especially with vulnerabilities like CVE-2025-11820 in the Graphina Elementor Charts and Graphs plugin. This vulnerability opens doors for potential attacks, making it crucial for users to understand its implications and mitigation strategies. What is CVE-2025-11820? CVE-2025-11820 describes a Stored Cross-Site […]

Enhancing Server Security in 2025 As cyber threats evolve, system administrators and hosting providers must continuously update their security practices. The recent CVE-2025-11987 incident is a stark reminder of the vulnerabilities that WordPress plugins can expose. This incident highlights the critical need for effective server security measures. Understanding CVE-2025-11987 The Visual Link Preview plugin for […]

We are happy to announce BitNinja 1.0.0  The version counter turned from 0.31 to our first full release, because BitNinja 1.0.0 is now running stable on more than 100 production servers worldwide! That’s a great success for us and a big loss for the hackers. 😉  So what’s new in 1.0.0?  What is new in addition […]

There were 22.000 attendees, from more than 100 countries, with the biggest names in the tech world, more than 500 speakers, lack of wi-fi, 145.000 tweets in 72 hours, many business cards, a high interest in our server defense system and wonderful Irish hospitality. Here’s the wrap up of Web Summit 2014. Web Summit is […]

Hi there, Imagine where we will be free to meet soon: BitNinja’s going to the WebSummit, in Dublin! A few months ago we applied to the Alpha program of this event, dedicated to startups. After 2 weeks we got an email from the organizer that said: “There are so many applications for the program that we won’t […]

Did you hear about the Shellshock bug on bash Unix shell? There hasn’t been such a scandalous bug since Heartbleed that has caused such a big mess among server owners.A series of attacks on websites and servers using the serious Shellshock bug was spotted a few days ago. Millions of servers use software that is vulnerable […]

Introduction The recent CVE-2025-55108 vulnerability highlights significant weaknesses in BMC's Control-M/Agent software, impacting server security. Default configurations that do not enforce SSL/TLS can enable unauthorized actions, making it crucial for system administrators and hosting providers to take swift corrective measures. Overview of the Threat The vulnerability allows unauthenticated remote code execution and unauthorized access to […]

Understanding the Risks of CVE-2025-12676 Cybersecurity threats continue to evolve, with recent findings highlighting vulnerabilities in the KiotViet Sync plugin for WordPress. Identified as CVE-2025-12676, this issue affects all versions up to 1.8.5. The vulnerability originates from a hardcoded password within the plugin’s authentication process. This flaw allows unauthenticated attackers to create and sync products, […]

Introduction to the KiotViet Sync Vulnerability The recent discovery of a security vulnerability in the KiotViet Sync plugin has raised alarms in the cybersecurity community. This serious flaw affects versions up to 1.8.5 and allows unauthenticated attackers to exploit sensitive information by extracting webhook tokens from the plugin's functionalities. Overview of the Vulnerability The KiotViet […]