Magento2 Malware and security issues

We noticing since last few months that Magento instances are affecting of malware on the Magento2 sites? For example:

1. health_check.php attack – this file compromised
2. Credit card fields were update with “_hook” post fix

Please let us know if someone has more information on such malware attacks. Is there any fixes?

Magento releasing patches very frequently, are they considering above malware?

Thanks.