Patch Fast. Observe Everything. Keep It Boring.

By: Oussama Jarrousse When a software patch is released, a race begins. On one side, attackers rush to reverse-engineer the patch, understand the vulnerability it fixes, weaponize it, and start attacking systems that are still vulnerable. On the other side,...

How Observability Helped Us Stay Ahead of the wp2shell Incident

By: Oussama Jarrousse In July, the WordPress ecosystem experienced another reminder that even the most widely used platforms can be affected by newly discovered security vulnerabilities. While the technical details of the so-called “wp2shell”...

Security Telemetry for Wordfence

Description Simula Security Telemetry for Wordfence exports Wordfence security telemetry in two forms: Prometheus metrics for the node_exporter textfile collector that can be scraped by Prometheus A local incident log containing blocked Wordfence requests that can be...