Blog

Notes from inside hacked WordPress sites.

Threat research, walkthroughs of real-world WordPress compromises (anonymised), plain-English explainers for site owners, and field notes from the RedSecLabs team. New posts roughly fortnightly.

Get new posts in your inbox.

One email per post. Threat walkthroughs, agency playbooks, and product updates. Unsubscribe anytime.

Subscribe →