SM64Hacks
Important Site Security Announcement - Printable Version

+- SM64Hacks (https://sm64hacks.com)
+-- Forum: Website (https://sm64hacks.com/forumdisplay.php?fid=1)
+--- Forum: Announcements (https://sm64hacks.com/forumdisplay.php?fid=2)
+--- Thread: Important Site Security Announcement (/showthread.php?tid=3400)



Important Site Security Announcement - Lunorian - 03-10-2018

Hey everyone,

Recently I joined to SM64Hacks Team as a Security Engineer. Today we are disclosing a potential compromise of the forum's database and other files.

Actions taken:
Since we noticed the compromise we' have done the following.
  • Moved to more secure server provider
  • Enabled HTTPS
  • Audited the filesystem for tampering
  • Changed administrative passwords
  • Audited scripts for potential security issues
  • Patched outdated PHP software
Prevention measures:
We want to prevent this type of issue from ever occurring again. So we're taking the following actions to better protect the site.
  • All staff and admins will be educated on industry standards to protect againist cyber attacks
  • Human and automated actions will look for compromise attempts and prevent them.
User Impact:
We highly recommend users change their SM64Hacks password as well as their password on any websites using the same password (terrible idea please use a password manager like everyone else)