I've been hosting webinars often since 5 months ago, and I'm curious to know what platforms are you using? How do you rate them, like what factors did you look into that made you decide to stick?
I have a WordPress catalogue website where I only display product images and catalogues
A few days ago, I received an email saying my WordPress password had been changed, even though I hadn’t changed it.
I immediately changed all my passwords and updated WordPress, PHP (8.3.6), plugins, my paid WoodMart theme. My WordPress version is 7.1.3.
However, someone keeps publishing spam blog posts on my website every day. I delete them, but they reappear.
What’s the best way to fix this permanently? Could it be a backdoor or malware?
Could this security issue affect my business email deliverability or put my emails at risk? Or someone may try to contact my customers through it ( this is a serious concern )
I’d appreciate advice from anyone who has dealt with a similar issue.
Les résultats proviennent d'un seul VPS (le mien). Les ASN désignent les réseaux d'origine. Ils ne désignent absolument PAS les responsables qui se cachent derrière ces attaques.
L'audit porte sur les événements (rejets) de mon pare feu UFW du 18 au 25/10/2026. J'ai aussi ajouté/fusionné toutes les IPs bannies par mes différentes protections cette année (plus de 18 000 IPs au total).
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week.
The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls one device that the network's access rules permit to connect to the target.
The findings were
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European government agency involved the exploitation of the PHP2Shell flaws.
"What researchers saw was an attack against a European government agency executed in the context of a vulnerable PHP application," a spokesperson for the company told The Hacker News via
Just wanted to share this interesting case I recently investigated. It started with an AWS suspicious activity alert and ended with around $8k in unexpected Bedrock charges..
Digging through CloudTrail, found thousands of Bedrock API requests using a compromised root access key. Someone had been using it to run Claude models through streaming responses.
Then I noticed the same key showing up in S3 backup requests from UpdraftPlus. Went ahead ahead to check the client's WordPress sites hosted on the same EC2 server, and yes! They were using the same key in UpdraftPlus across multiple websites and backup buckets.
The CloudTrail logs showed UpdraftPlus requests with different version numbers in the user-agent field, including the outdated version 1.24.3. Checked further and found an old WordPress multisite installation still running that version. There are known vulnerabilities in older versions, including one that could expose stored backup credentials under certain post-migration conditions. But we haven't found any solid evidence that this was how the key leaked.
Another interesting thing, besides the careless use of a root access key for S3 backups, was that the stored AWS secret key could be revealed right from the UpdraftPlus settings page using the browser's "Reveal Password" option. Of course, someone would need access to that admin page first.
I also found an old WordPress support forum post where someone raised the same concern, and an UpdraftPlus developer defended the approach, arguing that the credentials could be retrieved from the database anyway.
We still don't know exactly how the attacker got hold of the key. CloudTrail showed the key was first tested on August 23 using TruffleHog, a credential-scanning tool. Then came the actual Bedrock abuse around October 18–19, racking up an $8k bill.
Someone tried to save some time by using the same access key for all sites backup configuration - no fixed permission..
And maybe a little more careful credential handling on the plugin side wouldn't hurt either. But that's another debate.
Got a frantic call from a client last week. His customers were texting him screenshots of that red "this site is unsafe" page in Safari, and in Chrome the site just wouldn't load at all. Google had put the domain on its Dangerous list. It's a WooCommerce store, so basically nobody could get to it. No homepage, no checkout, nothing.
First thing I did was log in and look around, and honestly that's what made it confusing. Everything looked totally fine. Loaded the site on my desktop, poked around wp-admin, no redirects, no weird pages, nothing obviously wrong. But that's kind of the whole point with this stuff now. It's built so the owner never notices. You see a normal site, your customers and Google see something else.
The client was pretty sure he knew how it happened. He'd had a falling out with a developer he used to work with, a guy overseas, and from the way he described him he wasn't the type to care what he left behind on his way out. I try not to assume motive, but it lined up with what I ended up finding, so I kept it in the back of my head.
I used Claude Code to help me go through the server instead of grepping everything by hand. There were something like seven WordPress installs on the account (leftovers from old migrations), so I had it sweep all of them at once, searching the actual file contents for known bad patterns instead of going off file dates. That last part turned out to matter, I'll get to it.
Three things turned up.
First was a couple of fake plugins dressed up as cache/performance tools. One had its folder renamed with a .off on the end so it looked switched off, but it was still active. And it had code in it that hid it from the Plugins page, so even staring right at the admin you'd never see it was there. There was also an open AJAX endpoint acting as a backdoor.
The second one was sneaky, kind of impressive honestly. The theme's JavaScript files had malware tacked onto the end of them. Normal legit library file, and then way down at the bottom this chunk of obfuscated junk. It built a URL out of base64 pieces and fired a synchronous request at a server that was already offline, and because it was synchronous and nothing ever answered, the whole page would just hang. That was the "site keeps freezing" complaint.
And the reason it was a pain to find: whoever did it had reset the timestamps on the files. So if you go looking for recently modified files, which is the first thing most of us check, you get nothing back. They all looked like they'd been sitting untouched for months. Searching by content was the only thing that caught it.
Third was a rogue admin account. Random username, some email, sitting right there next to the owner's. That was the one that made the whole former-developer thing feel a lot more believable.
Cleanup took a while but wasn't crazy. Backed everything up first so I had a copy and a way to roll back. Then I went through the theme files and cut out the injected part at the point where it started, left the real library alone, and checked the file sizes against clean copies to be sure. Pulled the fake plugins and took them out of the active list. Deleted the rogue admin. Patched the hole they came in through, updated everything from clean sources, and changed all the passwords and the salts.
Site's on Cloudflare, so once the server itself was clean I flushed the Cloudflare cache and the live site started serving clean again.
The part I'd really stress to anyone going through this: getting the files clean is only half of it. To actually get off Google's list you have to go into Search Console, into the Security Issues section, and request a review once you're confident it's clean. And write up what you actually did, what the infection was, where it was, the admin account you pulled, the entry point you closed, all of it. I've seen vague "please re-check my site" requests sit forever or get bounced. Give them a clear rundown and let the site genuinely check out, and they'll re-scan and drop the warning.
By the next day the warning was gone, Chrome opened it fine, and Safari's red screen was cleared. About 24 hours start to finish.
The thing that stays with me is how much of it was set up so the owner would never see any of it. The hidden plugin, the code only Google sees. A compromised site can be quietly injecting spam links, bouncing mobile visitors off to junk sites, spinning up pages under your domain you don't even know exist, grabbing what people type into the checkout, and you'd have no idea from just loading it yourself.
Couple things I took from it. Don't trust file timestamps, if someone resets them your "recently changed" scan is useless, go by content instead. And don't skip the Search Console review, clean files alone don't lift the warning, the documented review request is what does it.
Somewhere in the middle of all this I ended up building a Claude Code agent that runs this whole scan for you. It goes through every install on the account, searches by file content instead of dates, flags the hidden plugins and the theme-JS injections and any rogue admins, and checks what the live site is actually serving to visitors. If anyone wants a copy I'm happy to send it over, no charge, and glad to answer questions about running a scan like this on your own site.
I'm curious how everyone here handles CRM integartion/ Do you usually have everything synced automatically or do you still need to manual transfer registration and attendee details? Any pro tips I can learn from?
Hey guys, so I'm working with my cofounder on sales at a growing B2B startup, and we've been trying to get better at managing our pipeline as we bring in more prospects.
Earlier this year, we were talking to a company that seemed like a good fit, but they had an internal project taking priority, so the conversation eventually went quiet. We followed up recently just to see where things stood, and they replied pretty quickly saying they'd be happy to catch up. The tricky part is that they haven't really said anything about what's changed on their end or whether they're actually in a position to move forward. We don't want to assume they're ready to buy just because they're open to another conversation.
My cofounder wants to put the opportunity back in our pipeline, but I'm hesitant because we've had situations where a prospect seemed interested again, we spent time following up and preparing for calls, and nothing really came of it. At the same time, I was the one who suggested reaching out, so I don't want to be overly cautious either.
I'm trying to figure out how other sales teams handle these situations. Any advice would be appreciated, especially if you've found a way to manage this without making your pipeline either too optimistic or full of prospects you're barely talking to anymore.
I'm the developer of Codeep Voice for Posts. It turns an English article already on your WordPress site into an MP3 in the Media Library, then adds a play and download button to the post.
The recording is generated on your computer, inside the WordPress admin. Readers play the saved file from your site. Readers can listen on phones too.
It's free and open source, with no account, API key or word quota. You can download the MP3 and use it elsewhere too.
A few practical limits: the voices read English, recording is best on a desktop or laptop, and the first run downloads the voice files. Keep the admin tab open while it records. Speed depends on your computer, especially for longer articles.
If you run an English WordPress blog, try it on one short post you know well. I'd like to hear whether you got a usable MP3 and which part of the setup was confusing.
I've had some experience creating and managing wordpress websites for awhile some time back.
I have an app idea that I would like to 'prototype' and ideate from.
I figured that since I don't need full functionality, and wordpress nowadays is mobile friendly, I could probably create a proof of concept kinda thing with it, focusing on UI and user flow.
So, I'm wondering if there are any themes you'd use, preferably free of course, or is gutenberg quite powerful enough for it to work?
Like, menus. Web tends to have top menus. I'd like a bottom based menu. Is that possible? I don't remember that ever being an option in the past. Or maybe it was but I never really explored that area
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models.
"Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no
I really like its cinematic design, minimal navigation, video presentation, project selection layout, and overall user experience. I want to clone the website as closely as possible using WordPress, Elementor Free, and custom code, without purchasing a premium theme or Elementor Pro.
I'm currently working with LocalWP on Ubuntu and am comfortable following technical instructions, including HTML, CSS, JavaScript, and PHP if needed.
Is there a free way to clone the complete website in WordPress while keeping it editable in Elementor?
Are there any free tools or workflows that could save me time?
I'm looking to learn the right approach rather than simply import a static HTML page that I can't edit properly.
Any guidance, tutorials, or examples of similar projects would be greatly appreciated. Thanks!
we had a major mess a few months ago when two reps emailed the exact same prospect on the same morning.
our web forms dropped entries into a spreadsheet while reps worked from separate inboxes, so how do other sales teams handle duplicate lead rules when moving our lead intake into hubspot gave us a single activity timeline that cleared up our whole pipeline? seeing the full contact history before hitting send kept our team on the same page and saved us from looking unorganized in front of new accounts.
Login
