When a new PanelAlpha hosting customer reached out asking us to investigate "a few infected sites," we expected the usual — a rogue admin account, maybe a backdoor plugin. What...
The past 12 months have been a gold rush for AI-powered security tooling. New frameworks, new protocols, new agent architectures — all promising to finally automate the work of detecting...
At 11:13 AM on March 4, 2026, an attacker who had compromised an administrative account on a WordPress-powered supplement retailer uploaded a malicious plugin zip file. Within seconds, our detection...
On January 22, 2026, our database monitoring systems flagged something unusual across our customer base: administrator accounts that shouldn't exist. Not just one or two stray accounts on a neglected...
Hunting WordPress Malware Hidden in Double-Encoded Page Builder Content
A case study in persistence: When standard security tools fail, detective work begins.
The Problem
We have a customer who...