#GoDaddy got Hacked. Ensure to follow the Recommendation
The hackers stole source code and implant malware on the company's servers after gaining access to the system.
GoDaddy is currently collaborating with respected cybersecurity forensics professionals and law enforcement organizations from all over the world.
Company Said:
"We have evidence, and law enforcement has confirmed, that this incident was carried out by a sophisticated and organized group targeting hosting services like GoDaddy"
"We apologize for any inconvenience this may have caused to any of our customers or visitors to their websites. We are using lessons from this incident to enhance the security of our systems and further protect our customers and their data."
Read Company Statement - https://lnkd.in/g2uDddw6
Recommendation:
- To mitigate such threats, WordPress site owners are advised to change passwords and update installed themes and plugins as well as remove those that are unused or abandoned by their developers.
- Enable Security on C-Panel
- Ensure SSL Protected including PFS enabled, Leverage encryption in transit but do not use old TLS versions
- Enable Web Application Firewall
- switch site to cloud providers who have good security offerings
Please keep in mind most of the Hosting providers are focused on security at infrastructure deliverables but they don't offer sufficient resource to oversee the security status of all the hosted applications
So Website/WebApp Owners are advised to continuously monitor Application Security Posture.
Read More about GoDaddy Incident:
https://lnkd.in/g_Yh8RxE
eCyLabs will act as vCISO and help to ensure your web app is protected from Cyber Attacks. IM me for quick discussion.