We think that some of the tools that we use for the web are secure if it comes automatically from a central point. Well, the guys over at Wordfence found a pretty significant point of failure at the api.wordpress.org service.