Over the past few years, we have worked to improve security where we can, providing patches, disabling certain Telerik features, and making general recommendations on how to monitor websites. However, the true solution is to rid the DNN Platform of Telerik entirely, which as part of DNN Platform 9.8.0 and later can be optionally completed, we will make it a mandatory process in the 10.0.0 release.