Blogs of War: Don’t Be Cannon Fodder
Summary: KrebsOnSecurity reported that it was hit by a large attack that abused the pingback function built into more than 42,000 WordPress blogs, and Sucuri Security said it had seen attackers abuse pingbacks on more than 160,000 WordPress blogs to launch distributed denial-of-service attacks against other sites. Pingback is enabled by default, and Sucuri's Daniel Cid said unchecking the settings only appears to prevent pingbacks on new posts, not on already-published ones.
Key Takeaway: Any WordPress site with pingback enabled can be used to attack others while the attacker stays hidden, so a blog administrator's own clean site can become a reflector in someone else's DDoS campaign without the owner knowing.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026