Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, target WordPress websites from the browsers of completely innocent and unsuspecting site visitors, security researcher Denis Sinegubko said. The activity is part of a&