A cybersecurity advisory from Malaysia’s national cybersecurity agency (MyCERT) was published on 26 July 2026, noting an observed increase in recent ransomware activity targeting online systems and websites.
Ransomware is a type of malicious software that can lock you out of your website files, databases, or hosting account, and often demands ...
Continue reading
A security vulnerability tracked as CVE-2026-46420 has been identified in setup-php, a common tool used to configure PHP environments for GitHub Actions automated workflows, which are often used for testing and deploying websites. The flaw affects all versions of setup-php from 2.25.0 up to (but not including) version 2.37.1. The tool pulls PHP ...
Continue reading
A security flaw has been identified in the "Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code" plugin for WordPress, affecting all versions up to and including 4.8.6.The flaw is an authentication bypass issue. Normally, this plugin sends secret one-time login codes only to the email address linked to a user ...
Continue reading
A security flaw has been identified in the TrueBooker – Appointment Booking and Scheduler System plugin for WordPress, impacting all versions up to and including 1.2.6.
The vulnerability allows anyone who does not already have a login account for your WordPress site to change the email address associated with any user account on your site, ...
Continue reading
