New Vulnerability in All in One SEO Pack Plugin 2.3.7 and earlier

Yesterday morning Panagiotis Vagenas, a Wordfence Security Researcher, discovered a new vulnerability in the All in One SEO Pack WordPress plugin. This is in addition to another serious vulnerability we wrote about yesterday morning in the same plugin.

As detailed yesterday, All in One SEO Pack is an extremely popular plugin with over 1,000,000 active installs. Both free and Premium Wordfence users with the firewall enabled had partial protection at the time we discovered this new vulnerability.

Vulnerability in Yoast SEO 3.2.4 for WordPress

The team of Wordfence discovered a vulnerability in Yoast SEO version 3.2.4 and earlier that allows any user with ‘subscriber’ level access to download your Yoast SEO settings. For sites that have open registration, this means that anyone can register and download your Yoast SEO settings by simply creating an account and running the exploit.

Decentralized social networks

What is Friendica and why should I bother using it?

Friendica is open source software that implements a decentralized social network. It provides a wide range of connectors to other social networks. Connect with friends on App.net, Diaspora, GNU Social, Pump.io or Twitter. You can import RSS feeds and post to Facebook, Libertree, Wordpress, Tumblr, Google+ pages and more. You can even interact via mail.

Why Friendica?

Panama Papers: How they hacked!

Email Hackable via WordPress, Docs Hackable via Drupal

The Mossack Fonseca (MF) data breach, aka Panama Papers, is the largest data breach to journalists in history and includes over 4.8 million emails.

Yesterday we broke the story that MF was running WordPress with a vulnerable version of Revolution Slider and the WordPress server was on the same network as their email servers when the breach occurred.

LiFi internet: First real-world usage boasts speed 100 times faster than WiFi

Li-Fi, a super-fast alternative to Wi-Fi, is finally moving from research labs to the real world after an Estonian startup implemented the technology within a commercial context. Velmenni, a recent finalist at the Slush 100 startup competition in Helsinki, revealed that it has begun trialling the technology within offices and industrial environments in Tallinn.