\n Distributed denial of service (DDoS) attacks are reaching record levels in 2025, and a worrying trend is emerging: cybercriminals are massively exploiting unpatched vulnerabilities, particularly in connected devices and poorly secured infrastructures. Here’s a look at the numbers, methods, and best practices to protect your WordPress site. \n <\/p>\n
\n According to NetScout,<\/strong> more than 27,000 botnet-orchestrated DDoS attacks<\/strong> were recorded in March 2025 alone. Service providers were targeted on average every two minutes, with peaks of more than 1,600 attacks per day. Attacks lasted an average of 18 minutes, longer than the global average, reflecting a shift toward more persistent and targeted campaigns. \n IoT devices and networking equipment, often chosen for their low cost, are rarely updated or patched. This leaves the door open to known vulnerabilities, sometimes several years old, such as CVE-2017-16894<\/strong> or CVE-2021-27162<\/strong>. Attackers leverage these weaknesses to build massive botnets capable of launching large-scale, coordinated attacks. \n Groups like NoName057(16)<\/strong> claim hundreds of attacks each month, often politically motivated, against governments, infrastructure, or strategic companies. More than 500 IP addresses and 575 different domains were targeted in March, demonstrating the scale and sophistication of the campaigns. \n WordPress, which powers over 40% of the world’s websites, is not immune. Outdated plugins and themes account for 97% of the security vulnerabilities recorded on the platform. In May 2025, the OttoKit plugin (over 100,000 active installations) was the target of massive exploitation of two critical flaws, allowing attackers to take control of vulnerable sites. \n DDoS attacks exploiting unpatched vulnerabilities are on the rise in 2025. Neglectful patching and plugin management expose WordPress sites to major risks. With cybercriminals becoming increasingly organized and well-equipped, regular updates and vigilance remain your best allies for protecting your site and your visitors. \n <\/p>\n \n Sources : ITPro, NetScout, The Hacker News, Wordfence, Patchstack<\/em>\n <\/p>\n\n\n","protected":false},"excerpt":{"rendered":" Distributed denial of service (DDoS) attacks are reaching record levels in 2025, and a worrying trend is emerging: cybercriminals are massively exploiting unpatched vulnerabilities, particularly in connected devices and poorly secured infrastructures. Here’s a look at the numbers, methods, and best practices to protect your WordPress site. <\/p>\n","protected":false},"author":1,"featured_media":1606,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[35,38],"tags":[],"class_list":["post-1762","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-security"],"yoast_head":"\n
Source : ITPro, NetScout<\/em>\n <\/p>\nWhy are unpatched vulnerabilities targeted?<\/h3>\n
Ports 80 and 443 (web and HTTPS) are the most frequently targeted, and multi-vector attacks (e.g., SYN Flood, DNS Flooding) are increasing, making defense more complex.\n <\/p>\nOrganized and motivated groups<\/h3>\n
Attacks originate from multiple countries, with Mongolia leading the way in IoT infections, but Germany and the United States are also among the main sources, particularly through the exploitation of cloud resources or poorly protected companies.\n <\/p>\nWordPress: a prime target<\/h3>\n
Sources : The Hacker News, Wordfence<\/em>\n <\/p>\nHow to protect yourself effectively?<\/h3>\n
\n
In summary<\/h3>\n