Link: Why You Need a WordPress Security Plugin
An answer to the question: Do You Need a WordPress Security Plugin? The explanation is also useful in helping those who aren’t experts understand why computer security must be regularly updated.
Similar Posts
Spoofed or Hacked?
Spoof emails can be convincing if they contain the right information. Further, how do you know whether you have actually been hacked? Here are some tips.
Link: Gmail Phishing Technique
Whether or not you use gmail, you should read this. The article is from Wordfence, which primarily does WordPress security, but they have previously published excellent work on other attacks, and every word of their advice is good. In particular, the advice to carefully read your address bar to make sure you are where you…
Two Factor Authentication (2FA) for Ordinary Users
Computers users have gotten used to using user names, passwords, and pins to secure their data. They may not be thinking of it in terms like “securing my data,” but they don’t want snoopy people in their phones, tablets, or computers. Unfortunately, many people have passwords or pins that may be easily guessed.
Kinsing/(kdevtmpfsi) Cryptomining Attack and Cleanup
Due to a remote execution flaw in CyberPanel, I had to clean up after this attack. The most useful site I found was Kinsing malware (kdevtmpfsi) – how to kill on CreateIt. The instructions there are useful. Don’t forget to do the full search, as if you have any “kinsing” files left, they’ll get things started…
Remind Employees (and Yourself)
To maintain information you need to regularly remind yourself and your employees to be attentive in their use of tools. We learn to follow certain safety rules with power tools, but often we forget to be similarly attentive with the devices that store and (hopefully) protect our information Some (but by no means all) things…
