The whole category in one page.
THE THING TO UNDERSTAND FIRST
Attacks are automated and indiscriminate.
Your site is targeted because it exists, not because of who you are.
WHAT CAUSES MOST COMPROMISES
Something out of date, or something exposed that should not be.
Neither is exotic. Both are preventable with routine maintenance.
THE EIGHT BASICS
Keep everything updated Strong unique passwords, in a password manager Two-factor authentication everywhere Remove what you do not use Back up off the server Limit who has access HTTPS across the site Monitor for changes
NEVER USE NULLED PLUGINS OR THEMES
They frequently contain injected code deliberately, and that is one of the most common causes of compromised small business sites here.
DELETE RATHER THAN DEACTIVATE
Deactivated plugin files can still be exploited.
THE MOST NEGLECTED ACTION
Removing access when someone leaves. Same day.
THE MOST DANGEROUS PLACE FOR A BACKUP
Your own account. It is lost with everything else.
WHAT PROTECTS YOU MOST
Updates. Nothing else comes close.
