#219 – Austin Ginder on How AI Is Exposing Hidden Threats in WordPress Plugin Updates

Nathan Wrigley interviews Austin Ginder about recent WordPress plugin supply chain attacks. Austin explains how attackers are acquiring legitimate plugins, inserting malicious code or update mechanisms, and compromising thousands of sites. AI tools have enabled Austin to detect these issues and trace incidents across multiple plugins, prompting the creation of WP Beacon, a resource for tracking such attacks. The conversation gets into challenges of plugin security, the role of hosting companies, potential solutions, and the ongoing need for vigilant, community-driven oversight to counter bad actors in the WordPress ecosystem.