Security ICDSoft RSS news feed Let's Encrypt certificates Today, our in-house developed hosting Control Panel got another feature - an installation utility for the SSL certificates of Let's Encrypt. Our customers can now install Let's Encrypt certificates for any of the domains they host with us. Let's Encrypt is a certificate authority that provides free domain-validated SSL certificates. Its activity is aimed towards providing secure con... Tue, 11 Oct 2016 04:00:00 GMT Critical vulnerability in ImageMagick discovered and immediately resolved on our servers Recently, sources on the Internet reported a critical security vulnerability in the ImageMagick library. ImageMagick is a popular image processing utility for web sites, and it is utilized by many image processing plugins and tools. The vulnerability allows execution of remote code and file manipulation on the server. Server security is a concern of an utmost importance, and our system administ... Wed, 04 May 2016 04:00:00 GMT Highly-critical SQL injection vulnerability for Drupal - mass-fixed on our servers On Oct 15, 2014, Drupal developers issued a notification of a critical SQL injection vulnerability, which affected all current Drupal 7.x versions. More information on the matter can be found at The existing proof of concept allowed hackers to turn the SQL injection vulnerability into a remote code execution / file upload, and there are reports of many h... Fri, 17 Oct 2014 04:00:00 GMT WordPress sites with us are now protected against botnet brute-force attacks During the last week, there is a massive botnet attack against random WordPress sites on the Internet, attempting to brute-force their administrative sections. To protect the WordPress sites of our customers, we have set up an automatic brute-force protection for all of them. In case of too many unsuccessful login attempts against a WordPress site, its administrative section login screen will s... Fri, 12 Apr 2013 04:00:00 GMT Prevention of unauthorized access to customer mailboxes As a part of our security and abuse prevention plan, today we automatically changed the passwords of all mailboxes on our servers, which we found to be insecure. The weak password detection was performed by using automated tools utilizing swaks (Swiss Army Knife SMTP) and simple brute-force attempts, performed on our side against each mailbox. Weak passwords may result in successful authenticat... Fri, 19 Dec 2008 05:00:00 GMT New anti-virus solution We are glad to announce that we have integrated a new anti-virus feature into our system. When enabled, the anti-virus software will scan all incoming messages. In case viruses are found, the server will not deliver the infected messages to the user's mailbox. This is the most effective and modern anti-virus solution, and will certainly eliminate a lot of junk e-mail on our servers. Customers... Thu, 13 Jan 2005 05:00:00 GMT