At 11:13 AM on March 4, 2026, an attacker who had compromised an administrative account on a WordPress-powered supplement retailer uploaded a malicious plugin zip file. Within seconds, our detection pipeline flagged it. What followed was a three-hour cat-and-mouse battle in which the attacker kept installing new malware while our system kept deleting it — automatical...