WordPress attacks ongoing

For years, WordPress blogs have attracted a huge number of malware attacks.  Recently, a number of web hosts are reporting attacks on WordPress blogs hosted on their sites, and warning their customers to take steps to protect their blogs.  What can you do?  These are some potential steps:

1) Ensure your WordPress site is kept up to date with the latest version.

2) Change your WordPress administrative panel password and make sure it adheres to strong password rules (use combination of upper / lower case characters, numbers, and special characters, and a minimum of 8 characters in length).

3) Use tools such as WordFence or CloudFlare to block attacks.

4) Consider adding a rule to your .htaccess file in your administrative panel folder to limit the IP addresses which will have access.

Of course, another, more permanent solution is to switch to another type of blog.

Below are links to some recent articles about the ongoing attacks:

InMotion: http://ht.ly/jZccx

HostGator: http://blog.hostgator.com/2013/04/11/global-wordpress-brute-force-flood/

Reddit WordPress: http://www.reddit.com/r/Wordpress/comments/17e1fu/lots_of_wordpress_sites_under_attack_anyone_else/

CloudFlare: http://blog.cloudflare.com/patching-the-internet-fixing-the-wordpress-br

 


Great list of skills to adopt for continuous learning

I thought I would provide a link to a short read of a great list of skills to adopt for continuous learning.  Bill Bonnstetter, the owner of TTI Success Insights, just turned 75, and remarked that “his best was yet to come.”  This blog article is by Ashley Bowers, CEO of TTI Success Insights.

Great article: http://www.ttisuccessinsights.com/blog/posts/why-great-leaders-are-continuous-learners-and-how-to-become-one


Latest Hawthorne Newsletter-Feb. 2013

In our latest newsletter, we mention a new offering coming from Hawthorne Services, called the Growth Curve X-Ray, illustrate exciting updates and new features in the Hawthorne Performance System (our offering for employee performance management), and provide articles from Profiles International.

http://www.hawthorneservices.com/files/Download/HawthorneNewsletterFeb2013.htm

 


Oracle’s Java product under fire again

CERT has published an advisory recommending that all computer users disable Java in their browsers.  CERT, which is sponsored by the Department of Homeland Security (and falls under their National Cyber Security group), is apparently making this recommendation, with some news services (such as ABC News) reporting that the DHS itself is making the recommendation.  What isn’t clear is if the latest zero day vulnerability is limited to the most recent version of Java, 7.10, as Oracle suggests, or if it is also a problem going back to version 6, which many systems run.

Apple and Mozilla have been known to block Java updates, and Oracle itself has indicated that a fix is shortcoming, although details on when the patch is available have not been provided by Oracle.

For more information, see these links below by Mathew Schwartz of Information Week, Zack Whitaker of ZDNet, and from CERT:

http://www.informationweek.com/security/attacks/java-under-attack-again-disable-now/240146082

http://www.zdnet.com/homeland-security-warns-to-disable-java-amid-zero-day-flaw-7000009713/

http://www.kb.cert.org/vuls/id/625617


Windows 8 Phones. How is yours working?

Recent articles have been popping up on the internet about random reboot problems with new Windows 8 phones, which have been available since the 2nd week of November.  Like many new operating systems, especially those used on mobile devices, new introductions always seem to have a number of problems.  Adoption has not been widespread – not yet, anyway.  The problems have been noted in forums relating to the Lumia 920 and the HTC 8x handsets.

What are the solutions?  I’ve seen comments suggesting that removing either or both of the Facebook and Skype apps seems to make a huge difference.  Of course, many users of these phones aren’t experiencing a problem at all.

If you have the random reboot problems, and use Facebook and/or Skype, remove them, and see what happens.

Chuck


Latest Internet Explorer vulnerability/How to Fix

With the news that Internet Explorer, versions 6-9 (who uses version 6, anyway?) has another unpatched vulnerability, we begin to wonder if it makes sense for anyone to continue using the flawed browser.  Microsoft has announced that they will offer an unplanned patch as close as possible to 10 am Pacific time on Friday.  But until then, what do you do?

Well, you can run a Microsoft Fix-It For Me, from this support document: http://support.microsoft.com/kb/2757760.

Or, you could switch browsers.  Chrome and Firefox are legitimate contenders.

Another option, of course, is a Windows 8 machine with IE 10, which is reportedly not vulnerable to the memory corruption issue.  Good luck with that!

The German government has gone so far as to suggest that it’s citizens discontinue using Internet Explorer in favor of other browsers.  Ouch!

In the meantime, I strongly recommend using the Fix-It if you continue to use IE, or switch to another browser.


Cloud value: CFO’s see it, do you?

Nice article by David Linthicum in InfoWorld’s Cloud Computing.  Of course, this is a Google sponsored study, but 96% is a pretty good indicator of perceived cloud application value:

http://images.infoworld.com/d/cloud-computing/wake-it-even-cfos-see-value-in-the-cloud-199929?source=rss_cloud_computing


Follow

Get every new post delivered to your Inbox.

Join 88 other followers