Security News > 2021 > September > Securing your WordPress website against ransomware attacks

According to a recent report from the Institute for Security and Technology, ransomware attacks cost businesses 21 days of downtime, on average.
Because WordPress is the market share leader, my team of SOC analysts aren't strangers to responding to WordPress security issues.
The one lesson we've learned time and time again: Preventative security measures are the most effective steps you can take against ransomware attacks.
An effective security plugin will validate website configurations and provide added levels of protection but having a WordPress hardening guide in place lays the foundation for security best practices.
In addition to a WordPress hardening guide, publishing a Content Security Policy adds an extra layer of protection by establishing a protocol for the JavaScript that can run on a webpage, along with how functionality works across the website.
An IR tabletop exercise simulating a ransomware attack where your WordPress site is the entry point allows your security team to walk through the necessary actions should an incident happen, and ensures you have answers to crucial questions.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/63IK8wf-Z9g/
Related news
- French govt contractor Atos denies Space Bears ransomware attack claims (source)
- Casio says data of 8,500 people exposed in October ransomware attack (source)
- Preventing the next ransomware attack with help from AI (source)
- Ransomware on ESXi: The mechanization of virtualized attacks (source)
- OneBlood confirms personal data stolen in July ransomware attack (source)
- WP3.XYZ malware attacks add rogue admins to 5,000+ WordPress sites (source)
- Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M (source)
- W3 Total Cache plugin flaw exposes 1 million WordPress sites to attacks (source)
- Medusa ransomware group claims attack on UK's Gateshead Council (source)
- Ransomware attack forces Brit high school to shut doors (source)