{"id":65629,"date":"2026-03-21T06:23:36","date_gmt":"2026-03-21T10:23:36","guid":{"rendered":"https:\/\/swling.com\/blog\/?p=65629"},"modified":"2026-03-24T07:00:33","modified_gmt":"2026-03-24T11:00:33","slug":"back-online-swling-post-security-update-and-whats-next","status":"publish","type":"post","link":"https:\/\/swling.com\/blog\/2026\/03\/back-online-swling-post-security-update-and-whats-next\/","title":{"rendered":"Back Online: SWLing Post Security Update and What&#8217;s Next"},"content":{"rendered":"<p><a href=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-26906\" src=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup.jpg\" alt=\"\" width=\"1280\" height=\"848\" srcset=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup.jpg 1280w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup-300x199.jpg 300w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup-768x509.jpg 768w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup-1024x678.jpg 1024w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2017\/07\/Eddystone-830-7-Dial-Closeup-624x413.jpg 624w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a>This past week has been a bit of a rollercoaster behind the scenes. After enjoying about a week free from the Lumma Password malware, it unfortunately managed to reinsert itself\u2014despite all of the security measures we had put in place. As mentioned previously, we believe the original entry point was a compromised user account with a weak password. Following the first cleanup, we forced password resets for all users and had our security team harden the site significantly. Even so, it appears some portion of the malicious code may have remained hidden in the database and was able to reestablish itself.<\/p>\n<p>Out of an abundance of caution, I took the <em>SWLing Post<\/em> offline again this week so it could be thoroughly inspected and cleaned. I didn\u2019t want to bring the site back online until I was confident the issue had been resolved and the site databases had been checked carefully. It\u2019s been a time-consuming process, but the goal has been to ensure the site is stable and secure before returning to normal operation.<\/p>\n<p>All of that said, this particular malware is known to be <em>especially<\/em> persistent and difficult to fully eradicate.<\/p>\n<p><strong>If it resurfaces again, I may have no choice but to take the <em>SWLing Post<\/em> offline for an extended\u00a0period and rebuild the site from the ground up.<\/strong> This would involve migrating all posts and media to a completely fresh WordPress installation, with a new database, on a new server\u2014essentially starting clean. It\u2019s a time-consuming process and could mean the site is offline for a week or more.<\/p>\n<p>Keep in mind that we have almost 10,000 posts, 47,000 comments, and tens of thousands of media files (graphics, audio files, etc.).<\/p>\n<p>I truly hope it doesn\u2019t come to that, but I want to be transparent about the possibility.<\/p>\n<p>Also, if you happen to encounter a fake Cloudflare verification window like the one shown below\u2014especially one that asks you to open a terminal or paste code\u2014please do not follow those instructions.<\/p>\n<div id=\"attachment_65630\" style=\"width: 762px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2026\/03\/Fake-CloudFlare.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-65630\" class=\"wp-image-65630 size-full\" src=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2026\/03\/Fake-CloudFlare.png\" alt=\"\" width=\"752\" height=\"647\" srcset=\"https:\/\/swling.com\/blog\/wp-content\/uploads\/2026\/03\/Fake-CloudFlare.png 752w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2026\/03\/Fake-CloudFlare-300x258.png 300w, https:\/\/swling.com\/blog\/wp-content\/uploads\/2026\/03\/Fake-CloudFlare-624x537.png 624w\" sizes=\"auto, (max-width: 752px) 100vw, 752px\" \/><\/a><p id=\"caption-attachment-65630\" class=\"wp-caption-text\">This is a screenshot of the FAKE CloudFlare challenge window. We do use CloudFlare and they will ask for versification that &#8220;you&#8217;re human&#8221; sometimes, but they never ask you to input information into the shell\/terminal of your computer.<\/p><\/div>\n<p>This is malicious behavior. Simply close your browser immediately and let me know. You can reach me <a href=\"swlingpost.postcard104@passmail.net\">at this temporary email address<\/a>. If you report it, it will help me respond more quickly and keep the site safe for everyone.<\/p>\n<p>Thank you again for your patience, support, and understanding as I work through this. It truly means a lot.<\/p>\n<p>73, Thomas<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This past week has been a bit of a rollercoaster behind the scenes. After enjoying about a week free from the Lumma Password malware, it unfortunately managed to reinsert itself\u2014despite all of the security measures we had put in place. As mentioned previously, we believe the original entry point was a compromised user account with [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[3],"tags":[755],"class_list":["post-65629","post","type-post","status-publish","format-standard","hentry","category-news","tag-swling-post"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pn3uc-h4x","jetpack-related-posts":[{"id":65500,"url":"https:\/\/swling.com\/blog\/2026\/03\/swling-post-security-update-site-restored-and-security-strengthened\/","url_meta":{"origin":65629,"position":0},"title":"SWLing Post Security Update: Site Restored and Security Strengthened","author":"Thomas","date":"March 6, 2026","format":false,"excerpt":"Dear SWLing Post readers and contributors, I wanted to provide a brief update following the recent security incident that required us to place the SWLing Post into maintenance mode. The cybersecurity firm assisting us has now completed their investigation and cleanup. I\u2019m happy to report that the SWLing Post has\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/swling.com\/blog\/category\/news\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2023\/06\/Norelco-Dial-Angle-Dark-1.jpeg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2023\/06\/Norelco-Dial-Angle-Dark-1.jpeg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2023\/06\/Norelco-Dial-Angle-Dark-1.jpeg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2023\/06\/Norelco-Dial-Angle-Dark-1.jpeg?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2023\/06\/Norelco-Dial-Angle-Dark-1.jpeg?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":39559,"url":"https:\/\/swling.com\/blog\/2019\/09\/security-vulnerability-affects-imperial-dabman-web-radios\/","url_meta":{"origin":65629,"position":1},"title":"Security vulnerability affects Imperial Dabman web radios","author":"Thomas","date":"September 14, 2019","format":false,"excerpt":"Many thanks to SWLing Post contributor, Ed, who writes: I'm wondering if SWLing Post readers who use Imperial Dabman web radios might want to read about this serious security vulnerability. (Source: Threat Post) Attackers can drop malware, add the device to a botnet or send their own audio streams to\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/swling.com\/blog\/category\/news\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/09\/Imperial-Dabman-1024x558.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/09\/Imperial-Dabman-1024x558.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/09\/Imperial-Dabman-1024x558.jpg?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":9779,"url":"https:\/\/swling.com\/blog\/2014\/05\/an-easier-way-to-comment-on-the-swling-post\/","url_meta":{"origin":65629,"position":2},"title":"An easier way to comment on the SWLing Post","author":"Thomas","date":"May 30, 2014","format":false,"excerpt":"If you've ever commented on the SWLing Post (or almost any other website, for that matter), you've no doubt been challenged by a CAPTCHA code before your comment could be published.\u00a0The CAPTCHA system saves this blog from hundreds of bogus comments each day so it's a necessary tool. For those\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/swling.com\/blog\/category\/news\/"},"img":{"alt_text":"CAPTCHA-code","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/05\/CAPTCHA-code.jpg?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/05\/CAPTCHA-code.jpg?resize=350%2C200 1x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/05\/CAPTCHA-code.jpg?resize=525%2C300 1.5x"},"classes":[]},{"id":31346,"url":"https:\/\/swling.com\/blog\/2018\/03\/bbg-sets-five-year-goals\/","url_meta":{"origin":65629,"position":3},"title":"BBG sets five-year goals","author":"Thomas","date":"March 26, 2018","format":false,"excerpt":"(Source: Radio World via Richard Langley) BBG Sets Itself a Series of Five-Year Goals Agency points to security, need to keep pace with changing media landscape The Broadcasting Board of Governors has a definite goal for the next five years \u2014 advance America\u2019s national interests, work in tandem with the\u2026","rel":"","context":"In &quot;Broadcasters&quot;","block_context":{"text":"Broadcasters","link":"https:\/\/swling.com\/blog\/category\/broadcasters\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/08\/VOA-Greenville-Curtain-Antennas.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/08\/VOA-Greenville-Curtain-Antennas.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/08\/VOA-Greenville-Curtain-Antennas.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2014\/08\/VOA-Greenville-Curtain-Antennas.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":36959,"url":"https:\/\/swling.com\/blog\/2019\/04\/can-you-identify-this-radio-from-the-1992-film-sneakers\/","url_meta":{"origin":65629,"position":4},"title":"Can you identify this radio from the 1992 film, &#8216;Sneakers&#8217;&#8211;?","author":"Thomas","date":"April 18, 2019","format":false,"excerpt":"Many thanks to SWLing Post contributor, Emilio Ruiz, who writes: Hi Thomas, I'm sending you and The SWLing Post readers these screenshots from the cult movie Sneakers; a great movie about incipient world of hacker security (phreaking, hacking, cryptography, etc). In a scene with Robert Redford and Dan Aykroyd, it\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"https:\/\/swling.com\/blog\/category\/news\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/04\/Sneakers-1.jpg?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/04\/Sneakers-1.jpg?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/04\/Sneakers-1.jpg?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2019\/04\/Sneakers-1.jpg?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":2642,"url":"https:\/\/swling.com\/blog\/2012\/01\/nsa-declassifies-receiver-dynamics-primer\/","url_meta":{"origin":65629,"position":5},"title":"NSA declassifies &#8220;Receiver Dynamics&#8221; primer","author":"Thomas","date":"January 25, 2012","format":false,"excerpt":"On January 11, 2012 the National Security Agency (NSA) released a pre-1995 article entitled \"Receiver Dynamics\" from\u00a0its classified internal magazine, Cryptologic Quarterly. It contains an excellent, well-written explanation of the specifications of shortwave receivers used\u00a0by some of NSA's K4 divisions. Download the article here (PDF). Thanks to Ed in the\u2026","rel":"","context":"In &quot;Articles&quot;","block_context":{"text":"Articles","link":"https:\/\/swling.com\/blog\/category\/articles\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/swling.com\/blog\/wp-content\/uploads\/2012\/01\/WJhf1000-300x127.jpg?resize=350%2C200","width":350,"height":200},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/posts\/65629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/comments?post=65629"}],"version-history":[{"count":1,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/posts\/65629\/revisions"}],"predecessor-version":[{"id":65631,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/posts\/65629\/revisions\/65631"}],"wp:attachment":[{"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/media?parent=65629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/categories?post=65629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swling.com\/blog\/wp-json\/wp\/v2\/tags?post=65629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}