DSSI

Nowadays it is staple for website owners and IT teams to setup a Content Management System (CMS) to power and operate websites.

Unfortunately, very few IT teams are keen on hardening the systems they are installing for the clients, and in fact, this is also the very reason why some websites are being defaced, or even compromised - such as the recent data leakage fiasco that happened in the electorate database of the Philippines.

The image you see here is a screen shot found from the public report from Securi, and it shows which CMS are infection prone. Is your CMS on the list?

As of Q1 of 2016, Sucuri has a Remediation group comprised of two distinct teams respectively called as the Incident Response Team (IRT) and Malware Research Team (MRT). In the process of remediation, the group was able to gather data from around 11,000 websites showing which CMS is prone or has been subjected to attacks. Note that this doesn't account for market share or install bases of the CMS brands in focus.

According to SUCURI:

"The three CMS platforms most being affected are WordPress, Joomla! and Magento. This does not imply these platforms are more or less secure than others. In most instances, the compromises analyzed had little, if anything, to do with the core of the CMS application itself, but more with improper deployment, configuration, and overall maintenance by the webmasters and their hosts. "

Read more on their full report:https://sucuri.net/website-security/Reports/Sucuri-Website-Hacked-Report-2016Q1.pdf

source:
https://blog.sucuri.net/2016/05/sucuri-hacked-report-2016q1.html

What you think is fun and *free*... you actually pay with your *identity and privacy*.

Occasionally, you will find your friends using fun or funny (admittedly) tools like Meme Generators, Horoscope, Billboard makers then you are enticed to click on it and make your own because it's free. BUT watch out! If you look closely (like these photos) these apps are not free because you pay with your identity and privacy. You could "edit" the information you want to provide, but you can't uncheck some things like your IP address, location, photo, gender, age, and name - which is enough information that identity thieves could use. So, are you sure you want to trade your personal information for the sake fun?

Keep safe.