Israeli Cyber Directorate Warns of Recent Attacks on WordPress Websites

The Israeli National Cyber Directorate has issued a warning about the recent defacement of dozens of websites running on the WordPress platform. All affected sites share a common technical stack, including WordPress, PHP, Nginx, and MySQL. The Directorate advises website administrators to implement two-factor authentication, keep WordPress and its plugins updated, remove unused components, restrict access to the admin interface, enable protections against brute force attacks, activate a web application firewall (WAF), and monitor logs for unusual activity. These measures aim to strengthen security and prevent further compromises of WordPress-based sites.