2018-02-06 UTC
# Imagine circa-2012 Anonymous getting their hands on enough 0days (or getting lucky and discovering enough misconfigurations) to get into the update server for WordPress and poisoning the update file with their malware. That's a very basic supply-chain attack. ( twitter.com/_/status/960764204595769344)