{"id":75823,"date":"2026-10-29T13:31:09","date_gmt":"2026-10-29T13:31:09","guid":{"rendered":"https:\/\/morningtrain.dk\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/"},"modified":"2026-10-29T13:56:22","modified_gmt":"2026-10-29T13:56:22","slug":"3-security-measures-that-close-the-entry-points-attackers-most-often-use","status":"publish","type":"post","link":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/","title":{"rendered":"3 security measures that close the entry points attackers most often use"},"content":{"rendered":"<section class=\"mt-blog-post-cover wp-block-mt-blog-post-cover\">\n    <div class=\"mt-blog-post-cover__inner page-container\">\n        <div class=\"mt-blog-post-cover__text-container\">\n                                                <p class=\"mt-blog-post-cover__tagline tagline\">Digitalization<\/p>\n                                                    <p class=\"mt-blog-post-cover__date\">\n                        29. October 2026                    <\/p>\n                                                        <h1 class=\"mt-blog-post-cover__title\">3 security measures that close the entry points attackers most often use<\/h1>\n                    <\/div>\n        <div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">More security vulnerabilities are appearing than ever, and attackers are exploiting them faster. But most attacks still come in through the same three entry points. Here is what you need to have in place and what you can do as early as this week. <\/p><\/div><figure class=\"wp-block-post-featured-image\"><img decoding=\"async\" width=\"1248\" height=\"720\" src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" style=\"object-fit:cover;\" srcset=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png 1248w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1-300x173.png 300w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1-1024x591.png 1024w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1-768x443.png 768w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1-600x346.png 600w\" sizes=\"(max-width: 1248px) 100vw, 1248px\" \/><\/figure>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"mt-blog-post-content mtSpacing-top-none mtSpacing-bottom-medium\"\n>\n    <div class=\"mt-blog-post-content__inner page-container\">\n        <div class=\"mt-blog-post-content__table-of-contents\">\n                    <\/div>\n        <div class=\"mt-blog-post-content__items\">\n                            \n\n<h2 class=\"wp-block-heading\">On 21 October, we closed the same vulnerability on more than 500 websites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">At 21:30 on Wednesday 21 October, four colleagues had updated and restarted more than 500 websites. The vulnerability was in PHP, which powers WordPress among other things, and it could give outsiders access to the server without logging in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That was not an exception. This is what everyday life looks like now.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For you, this is not about technology. It is about whether customers can submit a quote request, log in to the customer portal, and trust the emails coming from your salespeople. <strong>A hacked website or a compromised email account hits sales long before it hits the IT budget.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">It happened in just one month<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">From 27 September to 27 October, the following vulnerabilities appeared, among others:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong><a href=\"https:\/\/morningtrain.dk\/en\/what-is-php\/\" data-type=\"post\" data-id=\"49796\">PHP<\/a>:<\/strong> Outsiders could take over the server behind the website without logging in.<\/li>\n\n\n\n<li><strong>Windows servers that manage the network:<\/strong> Outsiders could run their own code on them.<\/li>\n\n\n\n<li><strong>A widely used VPN solution for working from home:<\/strong> The vulnerability was exploited before a fix existed.<\/li>\n\n\n\n<li><strong>Cisco\u2019s email filter:<\/strong> A single email with a specific attachment could give outsiders control of the filter.<\/li>\n\n\n\n<li><strong>A popular <a href=\"https:\/\/morningtrain.dk\/en\/how-plugins-kill-your-website\/\" data-type=\"post\" data-id=\"17276\">SEO plugin<\/a> for WordPress:<\/strong> For 11 hours, it was distributed with hidden malicious code.<\/li>\n\n\n\n<li><strong>A security certificate issuer:<\/strong> Weak keys made it possible to create fake versions of websites.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Here in Denmark, unauthorised parties gained access to information on 8.8 million CPR numbers. According to Ritzau, three accounts at the affected company used the password \u201c123456\u201d.<\/p>\n\n\n\n<figure class=\"wp-block-video\"><video height=\"720\" style=\"aspect-ratio: 1002 \/ 720;\" width=\"1002\" autoplay loop muted src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/october-21-500-websites-in-one-evening.mp4\" playsinline><\/video><\/figure>\n\n\n\n<div class=\"wp-block-mt-blog-post-text-box mt-blog-post-text-box\"><div class=\"mt-blog-post-text-box__inner page-container\"><div class=\"mt-blog-post-text-box__box\">\n<h3 class=\"wp-block-heading\">FACTS: <strong>The past month in numbers<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>16,246<\/strong> new vulnerabilities were registered in one month. That is about five times as many as in the same period in 2024.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>274<\/strong> actively exploited vulnerabilities have been added to the US cybersecurity agency CISA\u2019s list this year. In the same period in 2024, the number was 148.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>18<\/strong> exploited vulnerabilities per month is what Google is seeing this year. In 2025, the number was 10.5.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Sources:<\/strong> NVD, CISA and Google Threat Intelligence.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Not all vulnerabilities are dangerous for you. Many are minor or affect systems you do not use. But AI is now helping both researchers and attackers find vulnerabilities faster, so the time from a vulnerability becoming known to it being exploited is getting shorter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is serious. But it can be managed.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"736\" src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-1024x736.png\" alt=\"\" class=\"wp-image-75826\" srcset=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-1024x736.png 1024w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-300x216.png 300w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-1503x1080.png 1503w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-1536x1104.png 1536w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-767x551.png 767w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG-150x108.png 150w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/English-flere-huller-bliver-udnyttet-ENG.png 1848w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">How attackers get in<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In small and medium-sized businesses, attackers most often get in through three entry points, according to Verizon\u2019s major 2026 data breach report:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>A known vulnerability that has not been patched:<\/strong> 26%<\/li>\n\n\n\n<li><strong>A stolen or weak login:<\/strong> 13%<\/li>\n\n\n\n<li><strong>A fake email or message:<\/strong> 9%<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">So is there a single number for how much the risk drops if you take action? No &#8211; not for a complete package. But the three measures below close the two biggest entry points and make the third less dangerous. <strong>That is where you get the most security for your money.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-video\"><video height=\"720\" style=\"aspect-ratio: 1002 \/ 720;\" width=\"1002\" autoplay loop muted src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/the-three-doors-attackers-use.mp4\" playsinline><\/video><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">1. Update the entire solution and do it quickly<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It is not enough to update plugins. The server, PHP and your own code must also be updated. The October vulnerability was in PHP, and no plugin update would have closed it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Start with a list of all your solutions. Remember your webshop, customer portal, intranet and old campaign pages. You cannot update what you do not know you have and it is often the forgotten campaign page from 2019 that is left exposed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ask your web partner three questions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>How quickly do you patch a critical vulnerability?<\/li>\n\n\n\n<li>Do you also update the server and PHP, or only plugins?<\/li>\n\n\n\n<li>How will we be notified when it is done?<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If they cannot answer clearly, you have your answer.<\/p>\n\n\n\n<figure class=\"wp-block-video\"><video height=\"720\" style=\"aspect-ratio: 1002 \/ 720;\" width=\"1002\" autoplay loop muted src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/the-whole-solution-needs-updating.mp4\" playsinline><\/video><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">2. Enable two-factor authentication<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Two-factor authentication means a password is not enough. You also have to approve it on your phone. Microsoft has measured that two-factor authentication stops more than <strong>99% of account takeovers.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Start with email, hosting, DNS and access to the website\u2019s admin. If a salesperson\u2019s email is taken over, the attacker can write to your customers in the salesperson\u2019s name. If your DNS is taken over, the website and email can be pointed somewhere completely different.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Remember to use <strong>long passwords<\/strong> and a <strong>password manager<\/strong>. And remove logins for former employees on the same day they leave.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"736\" src=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-1024x736.png\" alt=\"\" class=\"wp-image-75827\" srcset=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-1024x736.png 1024w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-300x216.png 300w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-767x551.png 767w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-150x108.png 150w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-1536x1104.png 1536w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG-1503x1080.png 1503w, https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/derfor-stopper-tofaktor-angriber-ENG.png 1848w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">3. Take backups and test them<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A backup is only worth something if it works. So test that you can actually restore data and how long it takes. That is the difference between the website being down for two hours or two weeks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Keep at least one copy somewhere other than the server. That way it survives if the server is hit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Also agree who monitors things and what happens outside office hours. Attackers do not clock off at 4 p.m.<\/p>\n\n\n\n<div class=\"wp-block-mt-blog-post-text-box mt-blog-post-text-box\"><div class=\"mt-blog-post-text-box__inner page-container\"><div class=\"mt-blog-post-text-box__box\">\n<h3 class=\"wp-block-heading\"><strong>FACTS: Small words that matter<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Security vulnerability (CVE):<\/strong> A software flaw that outsiders can exploit. Each known vulnerability gets a number &#8211; a so-called CVE number.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>PHP:<\/strong> The programming language that powers WordPress and many other websites. It runs on the server and must be updated separately.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Two-factor authentication:<\/strong> A login where, in addition to the password, you also approve it on e.g. your phone.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Passkey:<\/strong> A passwordless login tied to your device. It is difficult to trick with a fake login page.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Pen test:<\/strong> An expert you hire to try to break in, so you find the vulnerabilities before others do.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">This can wait until the three basics are in place<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">These measures are good, but they deliver less if the three entry points are still open:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A filter in front of the website<\/strong> against attacks and overload, e.g. Cloudflare. It buys time, but it does not replace updates.<\/li>\n\n\n\n<li><strong>Passkeys<\/strong> for administration and finance.<\/li>\n\n\n\n<li><strong>Logging,<\/strong> so you can see what happened if the worst happens.<\/li>\n\n\n\n<li><strong>A pen test.<\/strong><\/li>\n\n\n\n<li><strong>A one-page incident response plan:<\/strong> Who calls whom if the website is down?<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">3 things you can do this week<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Enable two-factor authentication for email, hosting and DNS.<\/li>\n\n\n\n<li>Ask your web partner how quickly they patch critical vulnerabilities.<\/li>\n\n\n\n<li>Ask for proof that your backup can be restored.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">How we reached 500 websites in one evening<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The 500 websites were not luck. They are the result of fixed routines that ensure your website is updated before most people have even read the news:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>We typically patch vulnerabilities within 1\u20132 days.<\/li>\n\n\n\n<li>Server and PHP updates are automated.<\/li>\n\n\n\n<li>We scan WordPress sites every night for vulnerabilities and malicious code.<\/li>\n\n\n\n<li>Two-factor authentication is enforced on all our critical systems.<\/li>\n\n\n\n<li>We take backups every night, with an extra copy that cannot be deleted in an attack.<\/li>\n\n\n\n<li>We automatically test that the backups work.<\/li>\n\n\n\n<li>The operations team reviews alerts every day.<\/li>\n\n\n\n<li>We have a fixed plan if the worst happens.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Vulnerabilities will happen. What matters is how quickly they are patched.<\/p>\n\n\n\n<div class=\"wp-block-mt-buttons mt-buttons\">\n<a class=\"wp-block-mt-button mt-button mt-button--primary\" href=\"https:\/\/morningtrain.dk\/en\/wordpress-service-agreement-and-support\/\"><span class=\"mt-button__text\">Read more about our service agreements<\/span><\/a>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently asked questions<\/h2>\n\n\n\n<div class=\"wp-block-mt-accordion mt-accordion mtSpacing-top- mtSpacing-bottom-\"><div class=\"mt-accordion__inner\">\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">Is our website at risk because it runs on WordPress? <\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">No, not in itself. <a href=\"https:\/\/morningtrain.dk\/en\/wordpress-the-obvious-choice\/\" data-type=\"post\" data-id=\"58469\">WordPress<\/a> is not less secure than other systems, but it is widely used, so attackers look for vulnerabilities in it. The risk depends on how quickly your solution is updated.<\/p>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">Is it enough if we update plugins ourselves?<\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">No. Plugins are only one part. PHP, the server and your own code must also be updated, and you typically cannot do that from the WordPress admin.<\/p>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">How quickly should a web partner patch a critical vulnerability? I<\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">Within a few days\u2014and preferably within 24 hours when the vulnerability is already being exploited. For us, it typically happens within 1\u20132 days.<\/p>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">Is a filter like Cloudflare not enough?<\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">No. A filter can block known attack attempts and buy you time, but the vulnerability is still there until it is patched.<\/p>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">How often should we test our backup? <\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">At least quarterly and after major changes to the website. Test both that data can be restored and how long it takes.<\/p>\n\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-mt-accordion-item mt-accordion-item\"><div class=\"mt-accordion-item__title-wrapper\"><h3 class=\"mt-accordion-item__title\">We do not have a service agreement. What do we do now? <\/h3><\/div><div class=\"mt-accordion-item__content-wrapper\" style=\"display:none\"><div class=\"mt-accordion-item__content\">\n\n<p class=\"wp-block-paragraph\">Start with the three items from the list above. If you want a quick assessment of where your website stands, accept our security check below.<\/p>\n\n<\/div><\/div><\/div>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Get a free security check of your website<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We will review the three entry points for you: Are PHP and the server updated? Is two-factor authentication enabled on the most important logins? And is there a backup that can be restored? You will get a short status with what you should do first\u2014regardless of whether you stay with your current web partner.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Write or call me, and we will find a time.<\/p>\n\n\n\n<div class=\"wp-block-mt-buttons mt-buttons\">\n<a class=\"wp-block-mt-button mt-button mt-button--primary open-slide-in-contact\" data-contact-slide-in-view=\"2\"><span class=\"mt-button__text\">Book a security check<\/span><\/a>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n                                            <\/div>\n        <div class=\"mt-blog-post-content__small-related-posts\">\n                                <\/div>\n    <\/div>\n    <\/section>\n\n","protected":false},"excerpt":{"rendered":"<p>More security vulnerabilities are appearing than ever, and attackers are exploiting them faster. But most attacks still come in through the same three entry points. Here is what you need to have in place and what you can do as early as this week.<\/p>\n","protected":false},"author":2,"featured_media":75787,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[285,530],"tags":[],"class_list":["post-75823","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digitalization","category-wordpress"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>3 security measures that close the entry points attackers most often use<\/title>\n<meta name=\"description\" content=\"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"3 security measures that close the entry points attackers most often use\" \/>\n<meta property=\"og:description\" content=\"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/\" \/>\n<meta property=\"og:site_name\" content=\"Morningtrain\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-29T13:31:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-29T13:56:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1248\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Morningtrain\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Morningtrain\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/\"},\"author\":{\"name\":\"Morningtrain\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/#\\\/schema\\\/person\\\/95ca11b85ef369eb175acec694b8f213\"},\"headline\":\"3 security measures that close the entry points attackers most often use\",\"datePublished\":\"2026-10-29T13:31:09+00:00\",\"dateModified\":\"2026-10-29T13:56:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/\"},\"wordCount\":1401,\"image\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/morningtrain.dk\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\",\"articleSection\":[\"Digitalization\",\"WordPress\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/\",\"url\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/\",\"name\":\"3 security measures that close the entry points attackers most often use\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/morningtrain.dk\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\",\"datePublished\":\"2026-10-29T13:31:09+00:00\",\"dateModified\":\"2026-10-29T13:56:22+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/#\\\/schema\\\/person\\\/95ca11b85ef369eb175acec694b8f213\"},\"description\":\"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#primaryimage\",\"url\":\"https:\\\/\\\/morningtrain.dk\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\",\"contentUrl\":\"https:\\\/\\\/morningtrain.dk\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png\",\"width\":1248,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"3 security measures that close the entry points attackers most often use\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/\",\"name\":\"Morningtrain\",\"description\":\"Digitalt bureau p\u00e5 1&#039; klasse\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/morningtrain.dk\\\/en\\\/#\\\/schema\\\/person\\\/95ca11b85ef369eb175acec694b8f213\",\"name\":\"Morningtrain\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g\",\"caption\":\"Morningtrain\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"3 security measures that close the entry points attackers most often use","description":"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/","og_locale":"en_US","og_type":"article","og_title":"3 security measures that close the entry points attackers most often use","og_description":"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.","og_url":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/","og_site_name":"Morningtrain","article_published_time":"2026-10-29T13:31:09+00:00","article_modified_time":"2026-10-29T13:56:22+00:00","og_image":[{"width":1248,"height":720,"url":"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png","type":"image\/png"}],"author":"Morningtrain","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Morningtrain","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#article","isPartOf":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/"},"author":{"name":"Morningtrain","@id":"https:\/\/morningtrain.dk\/en\/#\/schema\/person\/95ca11b85ef369eb175acec694b8f213"},"headline":"3 security measures that close the entry points attackers most often use","datePublished":"2026-10-29T13:31:09+00:00","dateModified":"2026-10-29T13:56:22+00:00","mainEntityOfPage":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/"},"wordCount":1401,"image":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#primaryimage"},"thumbnailUrl":"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png","articleSection":["Digitalization","WordPress"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/","url":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/","name":"3 security measures that close the entry points attackers most often use","isPartOf":{"@id":"https:\/\/morningtrain.dk\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#primaryimage"},"image":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#primaryimage"},"thumbnailUrl":"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png","datePublished":"2026-10-29T13:31:09+00:00","dateModified":"2026-10-29T13:56:22+00:00","author":{"@id":"https:\/\/morningtrain.dk\/en\/#\/schema\/person\/95ca11b85ef369eb175acec694b8f213"},"description":"More security vulnerabilities are appearing than ever, but most attacks come in through three entry points. See what you need to have in place.","breadcrumb":{"@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#primaryimage","url":"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png","contentUrl":"https:\/\/morningtrain.dk\/wp-content\/uploads\/2026\/10\/3-security-measures-that-close-the-doors-attackers-use-most-often-1.png","width":1248,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/morningtrain.dk\/en\/3-security-measures-that-close-the-entry-points-attackers-most-often-use\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/morningtrain.dk\/en\/"},{"@type":"ListItem","position":2,"name":"3 security measures that close the entry points attackers most often use"}]},{"@type":"WebSite","@id":"https:\/\/morningtrain.dk\/en\/#website","url":"https:\/\/morningtrain.dk\/en\/","name":"Morningtrain","description":"Digitalt bureau p\u00e5 1&#039; klasse","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/morningtrain.dk\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/morningtrain.dk\/en\/#\/schema\/person\/95ca11b85ef369eb175acec694b8f213","name":"Morningtrain","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fd075e8683b261d91c3301b56488ad80cf3904fe4d37c719c33a938e840d29c9?s=96&d=mm&r=g","caption":"Morningtrain"}}]}},"_links":{"self":[{"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/posts\/75823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/comments?post=75823"}],"version-history":[{"count":4,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/posts\/75823\/revisions"}],"predecessor-version":[{"id":75861,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/posts\/75823\/revisions\/75861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/media\/75787"}],"wp:attachment":[{"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/media?parent=75823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/categories?post=75823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/morningtrain.dk\/en\/wp-json\/wp\/v2\/tags?post=75823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}