Thousands of websites have been compromised in the last month and over 1.5 million exposed to attacks, with specialists warning that any online business can become a target, representatives of a web hosting company warn.
„In the last month, security issues discovered in some of the world's most used online platforms have exposed approximately 1.5 million servers and websites to automated cyberattacks. Essentially, attackers took advantage of errors in systems used daily by companies for managing websites, emails, or online infrastructure, including WordPress, cPanel, Apache, or Microsoft SharePoint, and thousands of servers have already been compromised internationally, according to data published by international cybersecurity monitoring organizations.”, shows a statement from cyber_Folks Romania, a web hosting company.
In this context, cyber_Folks Romania warns that small and medium-sized enterprises have also become increasingly exposed to automated attacks and recommends that companies treat the security of their online infrastructure as an essential business component, not just a technical issue.
„There have been situations where we detected a vulnerability minutes after public information became available and implemented protective measures within just a few hours. In one instance, approximately 900 servers were protected in one hour and 30 minutes. Specifically, we applied temporary workarounds until official patches were released, isolated vulnerable services, or intervened manually, including on older, unmonitored servers. In security, reaction time makes the difference between a managed issue and a major incident.” said Horațiu Șimon, Chief Technology Officer of cyber_Folks Romania, as quoted in the statement.
The period of April-May 2026 was one of the busiest in recent years for cybersecurity specialists, following the successive emergence of several critical vulnerabilities that affected globally used platforms. In some cases, attacks began before official security updates were available, forcing technical teams to quickly implement temporary protective measures to mitigate risks. Among the reported consequences were unauthorized access to servers, malware installation, file encryption, and deletion of existing backups.
Conform specialiștilor, inteligența artificială a transformat radical peisajul atacurilor cibernetice în ultimii doi ani. Dacă înainte treceau zile sau săptămâni între publicarea unei vulnerabilități și exploatarea ei în masă, astăzi atacatorii generează cu ajutorul AI exploit-uri funcționale în câteva ore. În paralel, e-mailurile de phishing în limba română au devenit indistinctibile de comunicarea reală – gramatica impecabilă și personalizarea pe baza datelor publice fac ca semnalele clasice de fraudă să dispară.
In fact, the entry into force of the NIS2 Directive fundamentally changes the way companies in Romania must manage their cybersecurity. Under the new rules, companies in sectors deemed essential or important are required to implement technical and organizational security measures, report major incidents within 24 hours, and demonstrate the ability to resume operations following an attack. Fines for non-compliance can reach up to 10 million euros or 21% of global turnover.
NIS2 nu se aplică doar marilor corporații – furnizorii lor, partenerii din lanțul de aprovizionare și companiile de servicii digitale intră, de asemenea, sub incidența directivei.
According to the latest Eurostat data, approximately 22% of companies in the European Union have reported IT security incidents, and Romania ranks among the European countries with a low level of adoption of advanced digital protection measures. cyber_Folks currently manages over 50,000 active customers and more than 200,000 web domains, and company representatives say that the increased use of artificial intelligence will accelerate automated attacks in the coming period.
„Many entrepreneurs still consider cybersecurity to be exclusively a technical issue or something reserved for very large companies. In reality, any business that has a website, email, or databases is exposed. Automated attacks don't differentiate between a corporation and a small online store,” adds Horațiu Șimon.
Among the reported problems were vulnerabilities that allowed unauthorized access to servers, malware installation, or complete disruption of the affected infrastructure. Some attacks even led to file encryption and deletion of existing backups. Experts say such incidents are increasingly affecting companies that do not have dedicated IT departments and use standard hosting infrastructure for websites, emails, or online stores.
Companiile mici și medii se confruntă tot mai des cu probleme tehnice care pot afecta direct funcționarea site-urilor, magazinelor online sau emailurilor de business. Potrivit unei analize interne realizate de cyber_Folks România pe baza a 6.946 de tickete de suport deschise în perioada octombrie 2025 – martie 2026, cele mai frecvente solicitări au fost legate de migrarea site-urilor, certificate SSL, configurări de server și restaurarea backup-urilor.
The data shows that 44.81% of the requests (3,115 cases) concerned migrating websites to more powerful infrastructure, while 15.81% were related to SSL certificates and securing HTTPS connections. Issues that directly affect website operation, such as platform downtime or server resource overload, accounted for less than 5% of the total requests analyzed.
In total, 97.61% of the tickets analyzed were fully resolved on the same day, according to the company’s internal data.
„We are increasingly seeing entrepreneurs realize that online infrastructure is no longer just about hosting a website. For many businesses, the online platform, email, or e-commerce store have become essential components of daily operations, and any technical problem can have a direct impact on sales and customer relationships.”Horatiu Simon completes.".
Cyber_Folks este un brand internațional specializat în servicii de găzduire web, infrastructură digitală și soluții cloud scalabile, listat la Bursa de la Varșovia. Grupul deservește o gamă variată de clienți – de la antreprenori mici și medii, creatori digitali, până la companii mari din domenii precum ecommerce, banking sau plăți online, în peste 100 de țări.
In Romania, cyber_Folks is the largest provider of such services, based on turnover in 202.
