Release announcements, threat intelligence updates, and security news from the ReportedIP team.
Hive 2.0.15 fixes a silent drop of multi-recipient admin alerts, stops Hardening Mode from re-activating against the same attack pattern every hour, and respects relay 429 backoffs on the client side.
Read moreHive Light landed in the official WordPress.org plugin directory. A focused brute-force protector for wp-login.php: per-IP counter, progressive block ladder, optional community reputation lookup, GPL-2.0+, no account required.
Read moreMinimal data, 30-day retention, 7-day anonymisation, libsodium encryption at rest and offline-by-choice operation — privacy as a design principle.
Read moreNetwork-only activation shares one threat state, so cross-site brute-force aggregates into one campaign and a single block applies across every sub-site.
Read moreA managed relay sends OTP mail and SMS through clean infrastructure, with a transparent wp_mail() fallback so the login flow never breaks on a cap.
Read moreThe challenge renders inside the storefront theme on My Account, classic checkout and the WooCommerce blocks — cart state survives the verification.
Read moreLocal Shield is fully offline; Community Network shares anonymised attacker IPs so one site under attack protects every other site on the network.
Read moreWhen 3 IPs produce 20 failed logins in a minute, Hardening Mode tightens the failed-login and reputation thresholds network-wide for an hour.
Read moreNo real visitor requests .env.backup. The first hit to any of 40 bait paths is the attack indicator — no counting window, no waiting.
Read moreWebAuthn binds the credential to your origin, so a fake login page cannot capture it. Hive implements passkeys in-house, with no Composer dependency.
Read moreTOTP, passkeys/WebAuthn, email and SMS in the core — free in every plan, with recovery codes and a password-reset gate that closes the email bypass.
Read moreA progressive ladder gives a first offence 5 minutes and a persistent attacker 7 days, with a 30-day reset so a typo never costs a full-day ban.
Read more
