I just got off a call with one of my members, and we actually did some updates on her website. She also pointed out to me that she was getting email alerts from her security plugin, so we looked at that.
This got me thinking and we engaged on the topic of website security. And she went on sharing that in a group she is in, some people had to rebuild or were in the process of rebuilding their website because they had been compromised with malware.
On the topic of website security, here's my take on what I consider good practice and things to think about.