"WordPress.org is not WordPress" [pdf]

Over 6,000 WordPress hacked to install plugins pushing infostealers

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

WP Engine files an injunction to get its WordPress.org access back