Websense 2010 Threat Report - Events Wordpress Attacks

Choose a Web security module.

Web security protects your data and users:

From modern Web malware that antivirus
software can’t see
On info-sharing sites like Facebook, Dropbox, webmail, and wikis
With flexible policies that enhance productivity and make it safe to take full advantage of the dynamic Web

Today’s Web is dynamic.
You and 2 billion others use it every day.

It’s a risky place for data.
Security threats target confidential names, numbers, and other data.

Legacy solutions are no longer enough.
Antivirus products and URL filters can’t detect today’s clever, complicated Web threats.

Websense offers 24/7 Web protection with:

Real-time content analysis
Zero-hour malware detection
Enterprise-class data loss prevention

1

Web
2

email
3

data
4

results

What’s the best choice for you?

(you can change your choice later)

Complete, real-time content security

Secures social networking, blocks zero-day threats, and prevents confidential data loss

Partial Web security

Prevents or limits access to unproductive and inappropriate sites, as well as malware-infected pages or sites

Minimum security

Blocks access to unproductive and inappropriate sites

None - I am satisfied with my current Web security solution.

Choose an email security module.

Email security protects confidential data by:

Scrutinizing inbound email for malicious links, files, or other threats
Giving you tight control over data leaks in outbound email

Incoming email puts you at risk.
80% of incoming email is spam, often with links to malicious websites. The other 20% can carry infected files, invasive scripts, and other security risks.

Outbound email can leak confidential data.
Employees often send sensitive data to personal email accounts so they can work from home. Or they may send sensitive data by mistake. Either way puts your data at risk.

Websense offers 24/7 email protection for:

Inbound threats, including blended Web and email attacks
Outbound data loss prevention (DLP)

1

Web
2

email
3

data
4

results

What’s the best choice for you?

(you can change your choice later)

Yes

Get the most comprehensive email coverage in the industry – at the lowest cost

No

Choose this option if you know you already have complete email protection

Choose a data security module.

Data security protects confidential information:

In databases, file servers, and other places within your company
Via email, Web posts, printers, laptops, and mobile devices outside your company

Data is your company’s lifeblood.
Financial records, customer lists, credit card numbers. Confidential data is your company’s lifeblood – and a major security target

Good security prevents data leaks.
Policies protect your data, but it’s easy to accidentally send it in files, emails, or unsafe applications. One mistake can result in lost productivity, reputation, and future sales.

Tight controls for regulatory compliance
Simplified management and reporting
Deep (not “light”) DLP in email and Web
Options for network DLP, endpoint DLP, and discovery modules for finding sensitive data throughout your network
And a comprehensive DLP suite

1

Web
2

email
3

data
4

results

View modules

What’s the best choice for you?

(you can change your choice later)

Yes

Protect databases, personal information, business data, intellectual information, and other confidential assets

No

Choose this option if you’re sure you have adequate DLP

IV. Significant Events in 2010

WordPress Attacks – The World’s Biggest Blogging Platform Keeps Getting Hacked

Blog platforms have always been vulnerable to attacks. And our research shows that 56 percent of all compromised blogs are attacked more than once. WordPress (used by more than 13.9 million blogs), the world’s most commonly used blogging software platform, was hacked numerous times throughout 2010. Although WordPress releases new versions approximately three times per year, our research shows that many people are using much older versions of the software. Numerous vulnerabilities were known to exist during the height of the attacks. GoDaddy (Hosts 43 million domains and other hosting sites) saw persistent attacks in 2010. Something else worth noting is that when celebrity blogs are hacked, many people assume this means public defacement or an attempt to defame celebrity status. Although this happens on occasion, most attacks target financial gain.

Select Language

Product families

Platforms

Technologies

Know what you want?

Have questions?

Services

Solutions by need

Solutions by business

Solutions by industry

Resources

MyWebsense

Stay informed

New customers

Find a partner

Technology Integration Partners

Websense Global Partner Program

About us

What’s the best choice for you?

Complete, real-time content security

Partial Web security

Minimum security

What’s the best choice for you?

Yes

No

What’s the best choice for you?

Yes

No

IV. Significant Events in 2010

WordPress Attacks – The World’s Biggest Blogging Platform Keeps Getting Hacked