Our multi-layer Barracuda spam/virus/malware filtering is very effective, but some bad things do slip through when the bad guys come up with new tricks and send email before the spam filters get updated. Here’s an example that came in today, claiming to be from Chase and asking the recipient to correct something about their account. … Read More: Phishing email – proceed with caution »
We are in the process of upgrading our Zimbra mail servers. The new Zimbra mail server will not support un-encrypted connections. If you are experiencing issues connection to the new server after the upgrade, see our articles under the Securing Email connections section of our Knowledge Base. Call our 24/7 Phone Support, they will be… Read More: Zimbra mail servers upgrades »
There is a nasty ransomware virus that exploits vulnerabilities in Microsoft Windows and Office that is spreading rapidly worldwide. Once one computer on a LAN/WLAN is infected the virus can spread to other computers over the ethernet or WiFi. What you can do: apply all of the latest Microsoft updates now. More information: WordFence Blog … Read More: Petya Ransomware Attack 6/27/2017 »
On May 12, 2017, hackers exploiting a vulnerability in Microsoft Windows have attacked a large number of PCs worldwide, including hospitals in the UK and elsewhere and have infected vulnerable PCs with “ransomware” demanding payment in order to unlock the infected computer. The malware propagates by tricking email recipients into clicking on infected attachments. Once… Read More: Worldwide ransomware attack 5/12/2017 »
Domain registrar OpenSRS warns that there is an ongoing phishing attack against domain owners. The object is to trick you into providing credentials that will let the bad guys hijack your domain. If you get email claiming that your domain has been suspended, do not click any of the links or reply to the email… Read More: Warning: Phishing attacks against domain owners – fradulent suspension notices »
WordPress 4.2.1 Security Release WordPress 4.2.1 is now available. This is a critical security release for all previous versions and we strongly encourage you to update your sites immediately. April 27, 2015 the WordPress team was made aware of a cross-site scripting vulnerability, which could enable commenters to compromise a site. If your web site… Read More: WordPress 4.2.1 Critical Security Release »
The FBI has warned that ISIL is exploiting vulnerabilities in WordPress sites running out-of-date versions of WordPress or old versions of certain plugins or themes to deface the sites. The FBI’s statement: http://www.ic3.gov/media/2015/150407-1.aspx Sucuri’s writeup with mention of specific plugins to check: http://blog.sucuri.net/2015/04/fbi-public-service-annoucement-defacements-exploiting-wordpress-vulnerabilities.html The current version of WordPress (as of 4/8/2015) is 4.1.1. If you… Read More: ISIL Defacements Exploiting WordPress Vulnerablities – update now »
We are patching and rebooting all linux servers for the ‘GHOST‘ security vulnerability. Reboots aren’t needed often with linux, but because this patch replaces a library (glibc) that is used by many programs on each server, a reboot is required.
Email accounts are prime targets for spammers, who can no longer send spam directly from malware-infected computers because of improved spam filtering and steps that major providers like Verizon/Comcast/Cox have taken. If a spammer can hijack an email account, he’ll be able to send spam at high speed from a legitimate account until he gets… Read More: Don’t let your email account get hijacked – tips »
According to Ars Technica, encrypted eBay passwords and other information have been stolen by cyberattackers. If you have an eBay account, change your password ASAP. If your eBay password is one you’ve used on other services, including your accounts with HIS, change those passwords too, and don’t use the same password on more than one… Read More: eBay passwords compromised »