F-Secure Weblog - .my Websites Compromised

Yeah, Mamak Style's geng have found something bad about Malaysia (.MY) again, and they had "highlight" it in the Mamak Style. Luckily the wording use is correct "unintentionally hosting malicious or unsafe LINKS"

Nothing more can I say, MOST of them caused by unpatched/vulnerable plugins or modules. I'm not saying that keeping a website secure is easy, but at least please do subscribe to some mailing-list or RSS that can highlight you (webmaster) vulnerabilities in your current version of CMS, plugins or modules.

In Un-Mamak Style, we don't just critic, we share and try to solve the problem (although no one can hear my voice)

.MY Webmaster, before the Mamak Style geng found new ideas for their posts, kindly subscribe to these RSS:

• http://feeds.feedburner.com/HelpNetSecurity-Vulnerabilities?format=xml
• http://twitter.com/statuses/user_timeline/22233993.rss
• http://php.opensourcecms.com/general/rssfeed.xml

Update/upgrade/patch vulnerable CMS/addons/plugins/modules is required

Here we go again:

Users aren't the only ones that have to stay vigilant when it comes to security. On the other side of the fence, keeping a website secure is a challenge for even the best webmasters.

We recently came across lots of websites under the ".my" domain that were compromised and unintentionally hosting malicious or unsafe links.

Here's a screenshot of .my domain serving cracked software:



Read the rest of the posting here.

[The Mamak Style: HERE]