Penalties and new cases from the US SEC have reportedly dropped sharply so far in 2026. The agency is said to be pursuing fewer enforcement actions and collecting fewer fines than before.
Penetration Testing: WordPress Core flaw exploited by hackers in the wild, CISA confirms
The bug allows unauthenticated code execution during core upgrades. Wordfence blocked about 12,600 attacks in 24 hours and the federal patch deadline is 6 Nov