Monthly updates are not enough anymore. Automated attacks can compromise your business within days of a patch release. A hacked website can redirect your customers to sites with malware and porn, destroy your Google ranking and land you on dozens of global black lists.
Why would someone want to hack my site?
Each wordpress site is a place for hackers to post content. This may be malware, redirections to sites that will pay for visitors or just a place to publish a political message. They’re less interested in the data on your site and more interested in the ability to hijack your visitors for themselves or their clients. In fact, hackers mostly use automated tools to hack thousands of sites an hour. They simply don’t have time to search through any of them.