Last year I checkout a server where I found some exploit bash script in /tmp folder which download a binary file from 3rd party server. When I further checked it, I found apache user's cron entry for downloading and executing of bash script. After removing entry from cron, It added again after few days.
Then I consulted with system admin and He did not like the idea of apache user cron and he disable it. After that we did not get further same binary file or bash script on system. Then I assume their would be some exploit which used by hacker and then he found apache cron enabled. That make me cautious about crontab as apache.
After one year, I working on other project which requires to run cron from apache user, But I hesitated to use it after last year incident. Then i consulted alternative solution at https://stackoverflow.com/questions/33472905/right-way-to-implement-schedule-cron . But here I get that community are not negative about this and take as usual practice of using it.
Now concern is that If enable apache user cron is really a big security issue ?