Content

Attackers Leverage Recently Patched WordPress Bug to Deface Millions of Websites

By Marcos Colon

Found in the popular content management system’s REST API, if leveraged the bug allows online miscreants to modify the content of any post published via a WordPress site, according to a CSO Online report.

A patch was released on January 26, but the vulnerability was not immediately disclosed to the public by WordPress, leaving many users unaware of the update, resulting in a slew of attacks.

As of Monday, February 6, security firm Sucuri reported that attack campaigns have resulted in as many as 67,000 WordPress web pages being defaced. That number has since grown to 1.6  million pages found on roughly 40,000 websites, according to data from security firm Feedjit.

Webmasters are urged to apply the patch as soon as possible. 

Related

DevSecOps Scanning Challenges & Tips

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

It Should Be ‘Cybersecurity Culture Month’

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.