Five quick checks to prevent attackers from weaponizing your website

This advisory summarizes Microsoft’s disclosure of APT28 (Fancy Bear) web-based attacks and explains how attackers can abuse organizational websites—through malware delivery, spoofed domains, pivoting into infrastructure, DDoS, and defacement—and provides five practical mitigations: enable two-factor authentication, consider outsourcing site hosting, monitor look‑alike domains, promptly patch and audit, and limit third‑party plugins.