{"id":1872,"date":"2014-01-23T13:57:30","date_gmt":"2014-01-23T20:57:30","guid":{"rendered":"http:\/\/www.whitefirdesign.com\/blog\/?p=1872"},"modified":"2014-01-23T13:57:30","modified_gmt":"2014-01-23T20:57:30","slug":"att-enterprises-security-blog-running-on-outdated-and-insecure-version-of-wordpress","status":"publish","type":"post","link":"https:\/\/www.whitefirdesign.com\/blog\/2014\/01\/23\/att-enterprises-security-blog-running-on-outdated-and-insecure-version-of-wordpress\/","title":{"rendered":"AT&#038;T Enterprise&#8217;s Security Blog Running on Outdated and Insecure Version of WordPress"},"content":{"rendered":"<p>What we see over and over when it comes to web security is that security providers don&#8217;t take <a href=\"http:\/\/www.whitefirdesign.com\/resources\/secure-your-website-from-hackers.html\">basic security measures<\/a> with their own websites, which doesn&#8217;t give much confidence that they will make sure their customer&#8217;s security is handled properly and goes a long way to showing why web security is so bad. We can now add AT&amp;T&#8217;s Enterprise division to that group. They provide a variety of security services including <a href=\"http:\/\/www.business.att.com\/enterprise\/Family\/network-security\/consulting\/\">security consulting<\/a>, which they could probably use for their own website as their <a href=\"http:\/\/networkingexchangeblog.att.com\/topics\/security\/\">Security Blog<\/a> is running an outdated version of WordPress:<\/p>\n<p><a href=\"http:\/\/www.whitefirdesign.com\/meta-generator-version-check\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1873\" alt=\"AT&amp;T Enterprise Security Blog is Running WordPress 3.5.2\" src=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2014\/01\/att-security-blog-wordpress-version.png\" width=\"500\" height=\"150\" srcset=\"https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2014\/01\/att-security-blog-wordpress-version.png 500w, https:\/\/www.whitefirdesign.com\/blog\/wp-content\/uploads\/2014\/01\/att-security-blog-wordpress-version-300x90.png 300w\" sizes=\"auto, (max-width: 500px) 85vw, 500px\" \/><\/a>Keeping software running a website is a basic security measures as it insures that a known vulnerability in the software can be exploited. In AT&amp;T&#8217;s case they have failed to update the software in nearly six months and more importantly they failed to update after WordPress 3.6.1 was released in September. WordPress 3.6.1 fixed <a href=\"http:\/\/wordpress.org\/news\/2013\/09\/wordpress-3-6-1\/\">three security issues<\/a> including one that could &#8220;lead to remote code execution&#8221; and users were strongly encouraged to &#8220;update your sites immediately&#8221;. Considering how easy it is to update WordPress AT&amp;T doesn&#8217;t have an excuse for not doing it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What we see over and over when it comes to web security is that security providers don&#8217;t take basic security measures with their own websites, which doesn&#8217;t give much confidence that they will make sure their customer&#8217;s security is handled properly and goes a long way to showing why web security is so bad. We &hellip; <a href=\"https:\/\/www.whitefirdesign.com\/blog\/2014\/01\/23\/att-enterprises-security-blog-running-on-outdated-and-insecure-version-of-wordpress\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;AT&#038;T Enterprise&#8217;s Security Blog Running on Outdated and Insecure Version of WordPress&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35],"tags":[],"class_list":["post-1872","post","type-post","status-publish","format-standard","hentry","category-outdated-web-software"],"_links":{"self":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/1872","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/comments?post=1872"}],"version-history":[{"count":1,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/1872\/revisions"}],"predecessor-version":[{"id":1874,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/posts\/1872\/revisions\/1874"}],"wp:attachment":[{"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/media?parent=1872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/categories?post=1872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whitefirdesign.com\/blog\/wp-json\/wp\/v2\/tags?post=1872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}