Understand the key steps to stay safe
Does your business use WordPress to build, manage, and maintain your website? If so, a recently discovered vulnerability could provide criminals with access to control and manipulate your website without your knowledge.
According to security researchers, criminals have created a backdoor in more than 90 WordPress themes and plugins allowing them to gain access and control your website from anywhere in the world. This kind of access provides criminals with the ability to trick your customers into clicking on malicious links putting their data and information at risk. Furthermore, once they gain control of your website, criminals can sell access to other criminals on the dark web.
Depending on how you use your website (i.e., collect sensitive personal or financial customer information), this vulnerability could lead to embarrassment, financial penalties, or worse. Therefore, you need to act now to determine if your website is affected. However, before you panic, remember WordPress is one of the world’s most popular website builders for businesses, so you’re not alone. The Cyber Readiness Institute (CRI), our members, and partners are committed to providing you with actionable and practical cyber readiness guidance.
Take the following steps to determine if it is possible for criminals to have access to control your website. You may need to involve your IT consultant, managed service provider or web-site developer. CRI offers a five-part series of guides on using outside firms to reduce your cybersecurity risks; you can review them here.
Specific Steps:
General Steps to become Cyber Ready
There are general steps your company should take to reduce your risk from similar vulnerabilities – and from ransomware and many other cybersecurity threats.
You can also access our free cybersecurity resources, training, and guides at BeCyberReady.com or by following us on Twitter, Facebook, LinkedIn, and YouTube.
