A Cursor agent wiped a company's production database in 9 seconds. The AI didn't go rogue — the owner handed it root access and stored backups on the same volume.
A practical walkthrough of how I hardened my WordPress setup with passkeys / 2FA, Cloudflare Access, security headers, CSP tuning, and user enum fixes.