Since then the site has been down for a week while we responded. The short version is that someone found an exploit that let them upload a Flash file that contained an XSS worm. The worm tried to spread itself across the site and steal the IP address of anyone viewing the infected posts.
The site was shut down within about 6 minutes, so the actual damage was very limited. The main thing it did was grab the IPs of anyone who viewed the posts. The exploit itself was quickly fixed, but it was clear that the attacker had used LLMs to find this exploit, and that they were targeting us and would use LLMs to find other exploits if we brought the site back up too soon.
So we spent the next week fixing every security issue we could find and generally beefing up security to make sure this kind of thing couldn't happen again. We also used the downtime to do some much-needed server maintenance and upgrades that we had been putting off for a long time, which also took a couple of days.
