Thousands of websites have been compromised in the last month and over 1.5 million exposed to attacks, with specialists warning that any online business can become a target, representatives of a web hosting company warn.
„In the last month, security issues discovered in some of the world's most used online platforms have exposed approximately 1.5 million servers and websites to automated cyberattacks. Essentially, attackers took advantage of errors in systems used daily by companies for managing websites, emails, or online infrastructure, including WordPress, cPanel, Apache, or Microsoft SharePoint, and thousands of servers have already been compromised internationally, according to data published by international cybersecurity monitoring organizations.”, shows a statement from cyber_Folks Romania, a web hosting company.
In this context, cyber_Folks Romania warns that small and medium-sized enterprises have also become increasingly exposed to automated attacks and recommends that companies treat the security of their online infrastructure as an essential business component, not just a technical issue.
„There have been situations where we detected a vulnerability minutes after public information became available and implemented protective measures within just a few hours. In one instance, approximately 900 servers were protected in one hour and 30 minutes. Specifically, we applied temporary workarounds until official patches were released, isolated vulnerable services, or intervened manually, including on older, unmonitored servers. In security, reaction time makes the difference between a managed issue and a major incident.” said Horațiu Șimon, Chief Technology Officer of cyber_Folks Romania, as quoted in the statement.
The period of April-May 2026 was one of the busiest in recent years for cybersecurity specialists, following the successive emergence of several critical vulnerabilities that affected globally used platforms. In some cases, attacks began before official security updates were available, forcing technical teams to quickly implement temporary protective measures to mitigate risks. Among the reported consequences were unauthorized access to servers, malware installation, file encryption, and deletion of existing backups.
According to specialists, artificial intelligence has radically transformed the landscape of cyberattacks in the last two years. If it used to take days or weeks between the publication of a vulnerability and its mass exploitation, today attackers generate functional exploits with the help of AI in a matter of hours. In parallel, phishing emails in Romanian have become indistinguishable from real communication – impeccable grammar and personalization based on public data make the classic fraud signals disappear.
In fact, the entry into force of the NIS2 Directive fundamentally changes the way companies in Romania must manage their cybersecurity. Under the new rules, companies in sectors deemed essential or important are required to implement technical and organizational security measures, report major incidents within 24 hours, and demonstrate the ability to resume operations following an attack. Fines for non-compliance can reach up to 10 million euros or 21% of global turnover.
NIS2 does not only apply to large corporations; their suppliers, supply chain partners, and digital service companies also fall under the directive.
According to the latest Eurostat data, approximately 22% of companies in the European Union have reported IT security incidents, and Romania ranks among the European countries with a low level of adoption of advanced digital protection measures. cyber_Folks currently manages over 50,000 active customers and more than 200,000 web domains, and company representatives say that the increased use of artificial intelligence will accelerate automated attacks in the coming period.
„Many entrepreneurs still consider cybersecurity to be exclusively a technical issue or something reserved for very large companies. In reality, any business that has a website, email, or databases is exposed. Automated attacks don't differentiate between a corporation and a small online store,” adds Horațiu Șimon.
Among the reported problems were vulnerabilities that allowed unauthorized access to servers, malware installation, or complete disruption of the affected infrastructure. Some attacks even led to file encryption and deletion of existing backups. Experts say such incidents are increasingly affecting companies that do not have dedicated IT departments and use standard hosting infrastructure for websites, emails, or online stores.
Small and medium-sized companies are increasingly facing technical issues that can directly affect the operations of websites, online stores, or business emails. According to an internal analysis conducted by cyber_Folks Romania based on 6,946 support tickets opened between October 2025 and March 2026, the most frequent requests were related to website migrations, SSL certificates, server configurations, and backup restoration.
The data shows that 44.81% of the requests (3,115 cases) concerned migrating websites to more powerful infrastructure, while 15.81% were related to SSL certificates and securing HTTPS connections. Issues that directly affect website operation, such as platform downtime or server resource overload, accounted for less than 5% of the total requests analyzed.
In total, 97.61% of the tickets analyzed were fully resolved on the same day, according to the company’s internal data.
„We are increasingly seeing entrepreneurs realize that online infrastructure is no longer just about hosting a website. For many businesses, the online platform, email, or e-commerce store have become essential components of daily operations, and any technical problem can have a direct impact on sales and customer relationships.”Horatiu Simon completes.".
Cyber_Folks is an international brand specializing in web hosting services, digital infrastructure, and scalable cloud solutions, listed on the Warsaw Stock Exchange. The group serves a diverse range of clients – from small and medium-sized entrepreneurs and digital creators to large companies in sectors such as e-commerce, banking, and online payments, in over 100 countries.
In Romania, cyber_Folks is the largest provider of such services, based on turnover in 202.