Zlick Paywall < 2.2.2 - CSRF Bypasses

The plugin had CSRF logic flaws, which could allow attackers to bypass the CSRF in place, by either providing a dummy nonce, or no nonce at all in the requests depending on the affected method...

Identifying and Arresting Ransomware Criminals

The Wall Street Journal has a story about how two people were identified as the perpetrators of a ransomware scheme. They were found because -- as generally happens -- they made mistakes covering their tracks. They were investigated because they had the bad luck of locking up Washington, DC's vid...

WordPress Leaky Paywall Plugin <= 4.9.1 - PHP Object Injection Vulnerability

A PHP object injection vulnerability was found in WordPress Leaky Paywall Plugin. If there is a cookie set in the processcookierequests function, then it would be unserialized which leads to a PHP object injection. Solution Update the plugin...

Twitter, Javascript Defeat NYT's $40m Paywall

The New York Times is estimated to have spent $40 million to $50 million to construct an elaborate new paywall that will force some users of the site to pay a monthly fee to read paper content. But just days after rolling out a version of the paywall, the newspaper is playing whack-a-mole with...