On 26 July 2026, Malaysia’s national cybersecurity agency (MyCERT) released an advisory reporting a recent increase in observed ransomware attacks targeting online systems, including websites hosted by web service providers.Ransomware is a type of malicious software that takes control of your website files, data, or connected systems, locks them ...
Continue reading
A security flaw has been found in the web installer for ClipBucket V5, a website content management tool some hosting clients may use. The installer does not properly check or filter a specific input setting (called php_cli_filepath) before using it to run system commands on the server.This flaw does not require attackers to have login access to ...
Continue reading
A security flaw has been identified in the Total Donations plugin for WordPress, a tool many website owners use to add and manage donation features on their sites. All versions of this plugin up to and including version 2.0.5 are affected by this vulnerability.
This issue allows unauthenticated attackers, meaning people who do not have any login ...
Continue reading
Oracle has identified an access control flaw in its Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, two tools commonly used to manage website traffic and connect web applications to backend systems. The flaw means these tools do not properly restrict who can interact with the data and settings they manage.If this vulnerability is ...
Continue reading
