Mickeycaskill quotes Silicon:
Just to illustrate that you can never be too careful, cybersecurity specialist Trend Micro has confirmed that one of the blogs it uses to communicate with customers was itself the victim of a content spoofing attack. The culprits exploited a vulnerability in WordPress to inject fake content onto the blog before it was removed by Trend Micro and the bug fixed…
“Unfortunately there are many different URLs attackers can use to carry out the same attack, so a couple of fake ‘articles’ ended up posted on CounterMeasures,” head of security research Rik Ferguson told Silicon. “We have responded and shut down the vulnerability completely to resolve the issue.”
The chairman of Trend Micro claimed in 2011 that open source software was inherently less secure than closed source — but instead of blaming WordPress, Ferguson “said it goes to show how breaches are an unfortunate fact of life and that companies should be judged on how they respond… ‘Of course technology and best practice can mitigate the vast majority of intrusion attempts, but when one is successful, even one as low-level as this, you are more defined by how you respond than you are by the fact that it happened.'”
Read more of this story at Slashdot.
https://slashdot.org/slashdot-it.pl?op=discuss&id=10234731&smallembed=1