Based on currently available information, the website appears to have been the target of a website defacement attack rather than evidence of a specific exploit that can be confirmed publicly.

Reports indicate that:

• The homepage was replaced with unauthorized content and images associated with a group calling itself “Cyber Islamic Resistance.”
• Shortly afterward, the site became unavailable/offline.
• The incident reportedly occurred within hours of political developments involving Somaliland and Israel, leading many observers to view it as a politically motivated cyberattack.

A website defacement typically means an attacker gained sufficient access to modify the website’s content. Possible attack vectors (which cannot be confirmed without server logs or forensic analysis) include:

• Compromised CMS (e.g., WordPress) administrator credentials.
• Exploitation of an unpatched CMS, plugin, or theme vulnerability.
• Stolen FTP/SFTP or hosting control panel credentials.
• Vulnerable web server or file upload functionality.
• Weak passwords or lack of multi-factor authentication.

It is not possible to determine from the public website alone whether the attack involved:

• SQL injection,
• Remote Code Execution (RCE),
• Cross-Site Scripting (XSS),
• Distributed Denial of Service (DDoS),
• or any other specific vulnerability.

Those conclusions require forensic evidence such as:

• Web server logs
• Authentication logs
• File integrity monitoring
• Database logs
• Malware analysis
• Timeline reconstruction

If you’re the administrator or part of the incident response team, the immediate priorities would be:

1. Take the affected server offline or isolate it.
2. Preserve logs and make a forensic image before making changes.
3. Identify the initial point of compromise.
4. Reset all administrative credentials and enable MFA.
5. Update the operating system, CMS, plugins, and themes.
6. Restore from a known-good backup after verifying it is clean.
7. Scan the server for web shells, backdoors, and persistence mechanisms.
8. Review all user accounts and scheduled tasks for unauthorized additions.