Podcasts Technology Root Causes: A PKI and Security Podcast Root Causes 223: CT Log-Enabled Attacks on WordPress Sites

Root Causes 223: CT Log-Enabled Attacks on WordPress Sites

Published: May 11, 2022, midnight

Attackers are using CT logs to identify brand new WordPress sites and install malware before upcoming security measures are in place. This attack is novel in how it exploits Certificate Transparency information to identify likely targets. In this episode we explain what is happening and why it's noteworthy.