In the last couple of months, I've been waiting to hear the bad news of one of my sites/servers being compromised by this new wave of vulnerabilities detected by AI. The first (known) incident (for me) is already here

https://asd.learnlearn.in/smc-blog-clickfix-fix/