A client of our recently attended the 2026 Health Sector SMB Cyber Resilience Summit Melbourne - https://cx.cybercert.ai/2026-health-sector-smb-cyber-resilience-summit-melbourne#eventinfo

It was organised by Coalition Insurance operates in Australia through Coalition Insurance Solutions Pty Ltd, which provides active cyber insurance and risk management services https://www.coalitioninc.com/au

Apparently one of the Coalition Insurance speakers advised the audience that anyone using WordPress should move off this platform ASAP. They did not make any another suggestion leaving our client confused so they reached out to us for advice since we manage their WordPress site.

While WordPress is not perfect, I want to call out companies like this who make out-of-context declarations regarding cyber security. Telling every WordPress user to "move off the platform ASAP" without nuanced guidance is unprofessional. It will cause nothing but panic, especially in sensitive fields like healthcare.

They also run a blog and have this article about WP2Shell Vulnerabilities

https://www.coalitioninc.com/blog/security-labs/wp2shell-vulnerabilities-exploited-in-the-wild

There is no mention in their formal literature telling millions of organizations to abandon the world's most popular CMS but instead, they focus on proper patching and lifecycle hygiene, which applies to literally any software .

What are your thoughts?