{"id":2965,"date":"2016-10-31T10:05:36","date_gmt":"2016-10-31T16:05:36","guid":{"rendered":"http:\/\/www.whitefirdesign.com\/blog\/?p=2965"},"modified":"2016-10-31T10:05:36","modified_gmt":"2016-10-31T16:05:36","slug":"sitelock-provides-a-good-example-of-how-security-companies-are-working-against-improving-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.whitefirdesign.com\/blog\/2016\/10\/31\/sitelock-provides-a-good-example-of-how-security-companies-are-working-against-improving-cybersecurity\/","title":{"rendered":"SiteLock Provides A Good Example of How Security Companies Are Working Against Improving Cybersecurity"},"content":{"rendered":"

Looking at the news recently you wouldn’t have to look hard to see that cyber security isn’t in good shape and that isn’t a new problem.\u00a0A big part of the problem is the security companies, the organizations that are supposed to be improving things are in a lot of cases making things worse instead. For example, on the one hand we have a situation where many people are not doing the basics, while security companies are pushing more advanced security products and services, which they don’t provide evidence that would provide any value over doing the basics (or even evidence they would provide the protection to same degree as doing the basics). What make this issue stand out so much is that even the companies themselves are often failing to the basics, we recently looked at one cybersecurity company that claims to have \u201cclients in the intelligence community,\u00a0DoD\u00a0and nearly every cabinet agency\u201d and isn’t bothering to keep the software running the various parts of their website up to date while telling the public they need to take advanced measure to protect their websites<\/a>.<\/p>\n

October is\u00a0National Cyber Security Awareness month, which\u00a0unfortunately isn’t a time\u00a0when these companies consider that they are not having a positive impact, but instead yet another chance to hock their wares. Case in point is SiteLock, over at their at their WordPress focused blog, The District, they have a post,\u00a0National Cyber Security Awareness Month \u2013 What it Really Means for WordPress Users<\/a>. In that post they include a list of simple security steps. Since the post\u00a0is WordPress focused you would expect that making sure WordPress and it plugins\u00a0are up to date would be one of them, but it isn’t. Here is what they listed below:<\/p>\n

\n

Simple Security Steps to Implement\u00a0Today<\/h3>\n

Some of these may sound simple, but if not implemented can put you at risk.<\/p>\n