Australia Warns of Global Campaign Targeting Vulnerable CMS Platforms

The Australian Cyber Security Centre (ACSC) has reported a global campaign in which attackers are massively exploiting vulnerabilities in content management systems (CMS) and the plugins installed on them.

In the warning it issued, the agency notes that the attacks are international in scope and target vulnerable versions of popular CMS platforms, as well as their associated extensions and modules.

The scale of the problem

CMS platforms remain one of the most common foundations for building websites, and their plugins often become the weak link in the security chain: administrators frequently put off updating them, leaving systems exposed to attack for extended periods.

The ACSC does not specify the names of the platforms and plugins being exploited, limiting itself to a general warning about the nature of the threat and its global reach.

Recommendations

The agency urges organizations that use CMS solutions to install security updates promptly for both the platforms themselves and the plugins installed on them, and to keep a close eye on newly reported vulnerabilities.

Warnings of this kind from national cybersecurity centers typically serve as a signal for web administrators to audit the components they use and confirm that no known vulnerabilities are present in their deployed systems.

Source: Bleeping Computer