{"id":19494,"date":"2018-11-19T20:51:00","date_gmt":"2018-11-19T20:51:00","guid":{"rendered":"http:\/\/0c664300-c239-4b17-a1b6-b75d8d696f67"},"modified":"2018-11-19T20:51:00","modified_gmt":"2018-11-19T20:51:00","slug":"hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/","title":{"rendered":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers"},"content":{"rendered":"
<\/div>\n
\n

More security news<\/span><\/h3>\n<\/div>\n

Hackers have launched a new type of attack against Drupal site owners in the past several days, Imperva<\/a> researchers have told ZDNet<\/em>.<\/p>\n

Through these recent attacks, hackers aim to gain a foothold on servers, elevate their access to a root account, and then install a legitimate SSH client so they can log into the hijacked servers at later dates.<\/p>\n

To achieve their goals, hackers have been using two well-known exploits, one of them discovered way back in 2016.<\/p>\n

How the attack takes place<\/h3>\n

According to Imperva, the first steps in this attack begin with hackers mass-scanning the Internet for websites running an outdated version of the Drupal website manager (CMS) that was not patched against the Drupalgeddon 2 vulnerability<\/a> that came to light this year, in March.<\/p>\n

When they identify one of these vulnerable sites, hackers deploy a Drupalgeddon 2 exploit to get a limited foothold on infected sites.<\/p>\n

They later use this foothold to search through the Drupal site’s local configuration files for database credentials.<\/p>\n

If the database connection settings include an account with the name “root,” they try that account’s credentials for the server itself, in the hope of gaining root access to the site’s underlying server.<\/p>\n

\n<\/section>\n

However, if this fails, hackers move to deploy a second exploit named Dirty COW<\/a>, which is for an eponymous vulnerability discovered in 2016 that lets hackers elevate their access from a limited user account to root access.<\/p>\n

Hackers go through all these steps because they need access to a root account in order to install a legitimate SSH daemon on the server, which Imperva believes they need to connect to the server and run other operations.<\/p>\n

Dozens of attacks already detected<\/h3>\n

Nadav Avital, Threat Analytics Manager at Imperva, told ZDNet<\/em> earlier today in an interview that the company’s web firewall has already “protected dozens of sites from infection.”<\/p>\n

“Since all of the attacks were detected and blocked by Imperva we cannot fully determine the attackers end goal,” Avital told us. “Having said that, in one of our latest reports we found that almost 90% of such attacks are attempting to install a crypto-mining malware<\/a>.”<\/p>\n

But these attacks could be much bigger in scope besides the “dozens” of sites where Imperva has blocked exploitation attempts. This is because most web servers already have an SSH daemon running, and hackers wouldn’t need to go through the full exploitation scenario.<\/p>\n

Taking into account that this attack relies on exploiting two very well-known vulnerabilities for which patches have been made available a long time ago, website and server owners can easily make sure they’re immune to such attacks by updating Drupal and their Linux servers.<\/p>\n

Avital, in particular, warns about updating the Drupal CMS, the point of entry of these hacks. The researcher says Drupal sites have remained under a constant assault, even if the Drupalgeddon 2 vulnerability came to light over six months ago, and attacks should have abated as site owners updated their CMSs. Unfortunately, this wasn’t so.<\/p>\n

“Considering […], the lethargic pace of patching, the severity of the vulnerability and the fact that many of the hacking tools incorporated this attack, results in huge amount of attacks,” Avital told ZDNet<\/em>. “Even today Drupalgeddon is one of the most popular attack vectors hackers are trying to use.”<\/p>\n

More security news:<\/h3>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Hacks could be easily avoided if people would patch their Drupal CMSs and Linux web servers.
\nREAD MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":19495,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-19494","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"\nHackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-11-19T20:51:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers\",\"datePublished\":\"2018-11-19T20:51:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\"},\"wordCount\":565,\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\",\"name\":\"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg\",\"datePublished\":\"2018-11-19T20:51:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.threatshub.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/","og_locale":"en_US","og_type":"article","og_title":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-11-19T20:51:00+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers","datePublished":"2018-11-19T20:51:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/"},"wordCount":565,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/","url":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/","name":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg","datePublished":"2018-11-19T20:51:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/11\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers.jpg","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/hackers-use-drupalgeddon-2-and-dirty-cow-exploits-to-take-over-web-servers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/19494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=19494"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/19494\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/19495"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=19494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=19494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=19494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}