Cybersecurity Firm's Own Blog Is Hacked With Fake Articles

Mickeycaskill writes: In an era of unprecedented cyberthreats, many organisations turn to security firms for guidance on how to prevent and respond to incidents, and to their researchers for information about the latest threats.

But just to illustrate that you can never be too careful, cybersecurity specialist Trend Micro has confirmed that one of the blogs it uses to communicate with customers was itself the victim of a content spoofing attack.

The culprits exploited a vulnerability in WordPress to inject fake content onto the blog before it was removed by Trend Micro and the bug fixed.

“Unfortunately there are many different URLs attackers can use to carry out the same attack, so a couple of fake ‘articles’ ended up posted on CounterMeasures," head of security research Rik Ferguson told Silicon. "We have responded and shut down the vulnerability completely to resolve the issue."