Robert Scoble fails to update WordPress, gets hacked

Filed Under: Social networks, Spam, Vulnerability

Prominent blogger Robert Scoble, who runs the Scobleizer website, has come a cropper after hackers were able to break into his site and post links to pornographic websites.

In a posting last night on Twitter, Microsoft's former technical evangelist wrote:

My blog was just hacked into. You MUST upgrade your WordPress to avoid being hacked. We fixed my version.

Robert Scoble tweets about security issue

Scoble went into further detail revealing that he not upgraded his installation of blogging software WordPress to the latest version (currently 2.8.4) which fixes a vulnerability that could allow hackers to reset the blog's administration password:

I didn't update WordPress because I used to work at Microsoft and was scared (updates sucked 1/8th of the time).. I was using an old version of WordPress and someone reset the password for the Admin account and had a little fun before we figured it out.

There are over 9 million active installations of the WordPress software, working behind-the-scenes on websites around the world. Chances are that if you regularly read blogs that you're visiting sites that are running WordPress, so it's obviously important that blog owners keep their software up-to-date and don't leave themselves vulnerable to hackers.

, , , ,

You might like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

About the author

Graham Cluley runs his own award-winning computer security blog, and is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s. Now an independent security analyst, he regularly makes media appearances and gives computer security presentations. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.