Some of my CMS web sites were hacked in last few weeks. I could identified malfunction with site like redirection, unwanted java scripts etc. So I had to restore backups to get them online. One of expert said, WAF(web application firewall) will reduce risk and protect sites.
I decided to use http://www.incapsula.com/
Do you have any good services like this? another solution to protect Joomla, Wordpress sites.