Security Alert: Popular Website Building Tools Under Attack Worldwide

The Australian Cyber Security Centre has issued a global alert about hackers actively exploiting weaknesses in content management systems (CMS) and their plugins. These are the software tools that power millions of websites, including those used by small businesses, community groups, school clubs, and personal blogs.

Attackers are scanning the internet for websites running outdated versions of these platforms to break in. This primarily affects people who manage their own websites using platforms like WordPress, Joomla, Drupal, or similar tools. If you run a website for your business, church group, sports team, or personal blog, your site could be vulnerable if you have not kept the software updated. The risk is especially high if you use plugins or extensions to add features to your site.

1. Log into your website's admin panel and check for available updates. Install all updates for your core platform and every plugin you use.
2. Remove any plugins or themes you are not actively using.
3. If you are unsure how to update your site, contact your web hosting company's support team for help.
4. Change your website admin password to something strong and unique.
5. Enable two-factor authentication if your platform offers it. Going forward, make website updates part of your monthly routine, just like paying bills. Set a calendar reminder to check for updates on the first of each month. Consider using a web hosting service that automatically updates your software, or hire a professional to maintain your site if you are uncomfortable doing it yourself. An outdated website is like leaving your front door unlocked. Regular maintenance keeps intruders out.