What we saw We monitor traffic across the sites we watch, and we track IP addresses with a history of malicious behavior. A pattern kept surfacing in the logs. One flagged address would visit a site briefly, touching the kind of paths that reveal which plugins are installed. Reconnaissance, essentially, building an inventory of what…
Four threat actors probed our new server within hours of launch. Here’s exactly what they were looking for and why vibe-coded apps are handing it to them. By Tom Raef, Founder, We Watch Your Website May 25, 2026 We launched a new server this week. Not a WordPress site. A code analysis server, the infrastructure…
Introduction WordPress Security is full of myths that have no basis in reality or data. A particularly pervasive one is the unsubstantiated claim that “95% of WordPress hacks are due to outdated plugins or themes.“ If that’s the case, then during times of no current zero-day exploits, or the lack of major vulnerable plugins and…