TYPO3 is known not only for its extensive functionality but also for the fact that hopelessly outdated systems are repeatedly hacked. A newly revised guideline aims to provide a solution.
The document differentiates between the various user roles and is accordingly structured into instructions for system administrators, TYPO3 integrators, and editors.
A universally valid rule is to uninstall unused extensions and to always keep the application up-to-date, especially after (critical) security updates.
Find everything about TYPO3 here.
Link to the TYPO3 Security Guide

