In the last 30 days, the SWPanel SOC has been paying close attention to security alerts and news affecting hosting services and websites hosted on our servers. In total, we have published 5 security alerts and 4 contextual news items. Of the alerts, 3 were high risk and 1 was critical. Additionally, 66% of the affected services have already been fixed, while 29% still have no possible solution. These figures help us understand what's happening in the world of security and how we can protect you better.
What we've seen in SWPanel
In the last 30 days, the SWPanel SOC has published 5 security alerts. These alerts are warnings about vulnerabilities or threats that could affect services hosted on our servers. Of these 5 alerts, 3 have been classified as high risk and 1 as critical. High-risk alerts are those that could affect services, such as an unpatched plugin or a weak password. Critical alerts are even more serious, as they could allow an attacker to take control of a website or steal sensitive data.
In addition to the alerts, we have also published 4 contextual news items. These are not alerts, but information about trends, changes in the security world, or general updates that may be useful for understanding the environment in which we work.
Regarding the correction of affected services from the alerts, 66% have already been fixed. This means that, for example, if an alert mentioned a security flaw in a plugin, that plugin has already been updated in most cases. The remaining 29% still have no possible solution, which may mean that the affected plugin or software has no available update or that the client has not yet taken action to fix the issue.
The CVE cards, CVE by CVE
In the last 30 days, no specific CVEs have been published or concrete exploits mentioned. Therefore, there are no CVE cards to show at this time. However, it's important to remember that a CVE is a unique identifier for each discovered vulnerability. An exploit is a method or tool that attackers use to take advantage of a vulnerability. For example, if a plugin has a security flaw, an exploit could allow an attacker to access the website's data without permission.
How we got here
In the last 30 days, the number of published alerts has been 5. This number is not compared to data from previous periods, as we only have information from this period. We cannot confirm whether the number of alerts has increased or decreased, as there are no previous data to compare. However, the fact that 66% of the affected services have already been fixed is a good sign, as it indicates that most of the detected issues have already been resolved.
What's happening behind the numbers
The data from the last 30 days reflects a situation in which the SWPanel SOC has been active in detecting and publishing security alerts. High and critical risk alerts indicate that there are real threats that could affect websites hosted on our servers. These threats can come from automated bots testing passwords, gangs reselling access, or attackers looking for unpatched websites. The fact that 66% of the affected services have already been fixed suggests that most customers have acted promptly to protect their websites.
It's important to keep in mind that the number of alerts does not always directly correlate with the number of real attacks. Many times, the alerts are forecasts or recommendations based on public information. However, we should not underestimate their importance, as they can help us prevent problems before they occur.
What we can expect
If the trend continues, it's likely that we will continue to see security alerts in the next 2-4 weeks. The optimistic scenario would be that the number of alerts remains stable and that most affected services can be fixed quickly. The pessimistic scenario would be an increase in the number of alerts, some of which could be high or critical risk, which could require greater attention and action from customers.
The warning signs we should monitor include an increase in the number of high or critical risk alerts, a higher number of services without a possible solution, and a decrease in the percentage of fixes. If these signs appear, it could indicate an increase in threats or difficulties in resolving the detected issues.
How it can affect your website or business
Imagine you have an online store and one of the plugins you use has a security flaw. If you don't update the plugin, an attacker could exploit that flaw to steal your customers' data, such as addresses, emails, or even credit card numbers. This could not only cause a loss of trust from your customers but could also result in fines for GDPR non-compliance.
Another possible scenario is that an attacker manages to take control of your website and uses it to display pharmacy ads or to redirect your visitors to malicious sites. This could affect your reputation and lead to Google penalizing your search engine ranking.
It's also possible that an attack could bring down your website, meaning your customers can't access it for a period of time. This could result in direct financial losses and a loss of time and effort to restore the service.
How to protect yourself and prevent issues
- Keep your plugins and CMS updated. Updates usually include patches for known vulnerabilities. If you installed your website from SWPanel, you can enable automatic CMS updates.
- Use strong and unique passwords. A weak or reused password from another site can be an entry point for attackers. Use a password generator and a password manager to help you.
- Enable two-factor authentication (2FA). 2FA adds an extra layer of security, as you need two forms of identification to access your account.
- Configure a firewall for your website. A firewall filters web attacks before they reach your application. You can use the SWPanel firewall to protect your website.
- Use BotLock to block malicious bots. BotLock controls and blocks bots and crawlers that may try to attack your website.
- Make regular backups. In case of an attack, backups allow you to quickly restore your website. SWPanel offers backups that you can activate from the panel.
- Review recommended updates in Security 360. Security 360 detects CMS, plugins, and versions with known flaws and alerts you when updates are available.
- Subscribe to the SWPanel security newsletter. The newsletter alerts you when a flaw that could affect you is released. It gives you time to act before the issue becomes an attack.
- Monitor SWPanel security alerts. If you receive an alert, act immediately. Alerts are recommendations based on public information and can help you prevent problems before they occur.
- Use a supported version of PHP. Unsupported PHP versions do not receive security patches. If you're using an unsupported version, switch to a supported version from the hosting panel.
Which SWPanel tools can help you
- Security 360: Detects CMS, plugins, and versions with known flaws and alerts you when updates are available. If you installed your website from SWPanel, this tool can help you keep your website secure.
- Security 360 newsletter and alerts: Alerts you when a flaw that could affect you is released. If you're subscribed, you'll receive real-time notifications.
- BotLock: Controls and blocks malicious bots and crawlers from your website. If you use BotLock, you can protect your website from automated attacks.
- FireWall: Filters web attacks before they reach your application. If you use the SWPanel firewall, you can protect your website from malicious attacks.
- Automatic CMS update: If you installed your website from SWPanel, you can enable automatic CMS updates to keep it updated without having to do it manually.
- Backups: In case of an attack, backups allow you to quickly restore your website. If you use SWPanel backups, you can rest assured knowing you have a backup.
- PHP version change: If you're using an unsupported PHP version, switch to a supported version from the hosting panel. This allows you to receive security patches and keep your website secure.
- Ticket support: If you have questions or need help, you can contact support via ticket. The SWPanel support team is available to help you with any security issues.
Quick summary
- The SWPanel SOC has published 5 security alerts in the last 30 days.
- 66% of the affected services have already been fixed.
- 29% of the services still have no possible solution.
- It's important to keep your plugins and CMS updated, use strong and unique passwords, and enable two-factor authentication.
Sources
The data in this article has been collected by the SWPanel SOC from the alerts and news published in the last 30 days.
