[WordPress Security] Hackers Find Fresh WordPress Sites Within 30 Minutes

Last week our team attended the Black Hat and Def Con security conferences in Las Vegas. A new technique was presented at Def Con that attackers can use to find freshly installed WordPress websites within 30 minutes of the SSL certificate being created. 

This allows attackers to find WordPress sites as they are being set up. In today's post we discuss how this technique works and we provide two techniques to secure your site during setup. This expands on our post earlier this month where we described the "WPSetup Attack".

Regards,

Mark Maunder 
Wordfence Founder & CEO