Massive attack on WordPress sites

[Kevin Lancaster]

Massive attack on WordPress sites

Attacks on WordPress sites which contain the REST API flaw have increased significantly, with 1.5 million pages defaced.

The WordPress REST API vulnerability allows a remote attacker to craft an HTTP request that pings a REST API endpoint and alters titles and content on the user’s website.

 

[biometrics]

My WP site is set to auto update but it didn't install 4.7.2 yet. Weird.

 

[Murmaider]

Yeah this exploit is going to be a big one!

Our systems have already started patching all our customers and reseller's customers wordpress sites for this exploit, without them having to upgrade to 4.7.2 right now.

 

[Thor]

/Runs like a mofo to my cat blog

 

[Petec]

The baddies are going to deface it to say " Scat Blog " !!!

Run like the wind brutha!

 

[gregmcc]

Runs off to check my blog...phew on 4.7.2

 

[DrJohnZoidberg]

Oh thought Massive Attack had an opinion on WordPress sites

 

[Thor]

The cats are safe!

I still some input on the what the heck to do with the landing page. I don't like it, but I cannot think of anything else to do there.

 

[ponder]

Every time I see the thread title I think of,
[video=youtube;u7K72X4eo_s]https://www.youtube.com/watch?v=u7K72X4eo_s[/video]