US Army websites defaced with pro-Kurdish sentiments, insults to Trump
US Army websites defaced with pro-Kurdish sentiments and insults to Trump.
Multiple U.S. Army subdomains were defaced using a 404 hijacking campaign, displaying pro-Kurdish messages and insults to political figures. The affected sites, oil.army.mil and ai2c.army.mil, were hosted on a legacy third-party platform and have since been taken offline. The incident is under investigation by Army cyber investigators.
AI summary of the linked source. Not reviewed by an editor. How this works
Run WordPress?
Get an email when a new story names WordPress, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMultiple U.S. Army subdomains were defaced after attackers exploited a '404 hijacking' technique against sites hosted on an outdated, legacy third-party platform. The root cause lies in a failure to maintain proper configuration oversight and lifecycle management of externally hosted government web assets. Legacy platforms that are no longer actively maintained introduce significant attack surface that adversaries can easily exploit. This incident highlights the danger of retaining third-party hosting arrangements beyond the supported life of the underlying infrastructure, particularly for government-affiliated domains. Even subdomains perceived as low-value can serve as launchpads for reputational damage, disinformation, or further exploitation.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — oil.army.mil
- domain — ai2c.army.mil