On the hour, when there is news

Traffic news.

Security news for anyone running a WordPress site: what happened, whether it affects you, and what to do today.

Follow by RSS
  1. For technicians · PHP fix due 14:00 UTC

    php2shell: a working checklist for the next few hours

    Two critical RCEs in PHP core, leaked before the fix. The release lands at 14:00 UTC and mass exploitation is expected soon after. Inventory, patching, end-of-life PHP and what a break-in looks like.

  2. For site owners · PHP fix due 14:00 UTC

    A major incident on PHP, and what it means for your WordPress website

    Two serious flaws in the software underneath WordPress leaked before they could be fixed. The fix arrives today. Here is what happened, in plain words, and the one email to send this morning.