Originally Posted by Sly

WordPress is much better these days than it used to be.

If you guys have WordPress sites, they should be isolated on their own users so that if one gets hacked it does not leak over and destroy all of the other sites on the same user. We have seen this happen countless times. Separating WordPress sites onto their own users was an absolute lifesaver and how we ensure all WordPress sites are installed moving forward.

It's also absolutely crucial that you are updating WordPress, the plug-ins and the themes that you use. Any plug-in that you do not actually use should be completely removed.