Wordfence opens a team for reporting active WordPress threats
Original title: Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem
Active exploitation, tampered updates, and mass campaigns can be emailed to threat-response@wordfence.com instead of general support.
Wordfence said on October 26 it formed a Threat Response Team, led by Alex Thomas, to handle the first 72 hours after a new WordPress threat appears. The team is meant to turn reports into protection for Wordfence users and published guidance. Routine vulnerability research stays with the Threat Intelligence Team. Malware samples, new flaws, and issues in Wordfence products use separate channels.
- Reports should include timing, affected software and versions, and indicators such as files or IPs.
- New plugin or theme vulnerabilities still go through the vulnerability submission form.
- Undetected malware samples go to samples@wordfence.com.
- Wordfence product security issues go to security@wordfence.com.
- 1.Email active WordPress exploitation, supply-chain tampering, or mass campaigns to threat-response@wordfence.com.
From the original article
7 min read at wordfence.com
The Wordfence Threat Response Team is a new small, technically hands-on team responsible for turning rapidly emerging threats into customer protection and clear customer guidance. Spot an active threat? Report it directly to threat-response@wordfence.
By Brad Osborne · wordfence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.