New WordPress exploitation attempts, continued TeamCity attacks, and a newly disclosed industrial-integrator intrusion put web, build, and OT supplier trust in focus. SolarWinds fixes require configuration-aware triage; Zyxel's federal deadline falls today.