Notes from inside hacked WordPress sites.
Threat research, walkthroughs of real-world WordPress compromises (anonymised), plain-English explainers for site owners, and field notes from the RedSecLabs team. New posts roughly fortnightly.
Brand Protection in Cybersecurity: How to Detect Impersonation Before It Spreads
The useful question is not whether someone can copy your logo. It is how early you can see the infrastructure, credentials and…
EASM vs Vulnerability Management: What Each Finds and Misses
Security teams rarely lose sleep over the server that is already in the vulnerability scanner. The awkward one is the…
WordPress Backdoor Detection: Plugin vs Server-Side Scanning
A backdoor is built to survive the obvious cleanup. This guide explains what local WordPress scanners, remote analysis, host-level tools…
WordPress Supply Chain Attack: Detecting Trojanised Plugins
How poisoned dependencies, compromised build pipelines and trusted plugin updates reach WordPress sites, what the 2026 incidents teach us, and…
Guardian Gaze 2.5.0: Free WordPress Security Alerts
Product Update | Version 2.5.0 The WordPress dashboard should not be the only place you discover that an administrator has…
From Managed WordPress to Wazuh: An Agentless Guardian Gaze SIEM Integration
During a Guardian Gaze SOC integration, the RedSecLabs (RSL) team needed to bring WordPress security telemetry into an existing Wazuh…
WordPress SIEM Monitoring: Detect Rogue Admins and Backdoors with Guardian Gaze and Wazuh
Series Context Article 1 covers the incident-response case: multiple unauthorised administrators, wp2shell exposure analysis, backdoor checks and recovery. This article…
Inside a wp2shell WordPress Hack: Rogue Admin Accounts, Backdoors and Incident Response
Case-study Boundary The affected pharmaceutical organisation is anonymised. The investigation confirmed multiple unauthorised WordPress administrator accounts. The circumstances were consistent…
AI WordPress Security Plugin: How LLM Detection Catches What Rules Miss (2026)
Every WordPress security plugin before 2024 worked the same way: maintain a database of known malware signatures, compare your files…
Wordfence Review 2026: What It Gets Right, What It Misses, and When to Use It
Wordfence is the leading free WordPress security plugin, but its in-process scanner has limitations that modern malware can exploit. Here's…
Get new posts in your inbox.
One email per post. Threat walkthroughs, agency playbooks, and product updates. Unsubscribe anytime.