I happened to be tinkering on my website, so I saw it get compromised in relatively real time. Thankfully the nature of the compromise was such that it 1) didn’t pwn the whole server, and… Oof. You think your WP site is secure, then BOOM