On July 26 2026, Malaysia’s national cybersecurity agency MyCERT issued an advisory noting a recent rise in ransomware attacks targeting websites and online business services.
Ransomware is malicious software that locks access to your website files, databases, or hosting account, with attackers demanding payment to restore access. A successful ...
Continue reading
A security flaw has been found in setup-php, a common tool used to configure PHP environments for automated tasks run via GitHub Actions (a service many teams use for automated workflows like site testing and deployments). The flaw affects all versions of the tool from 2.25.0 up to 2.37.0.The vulnerability works because the tool reads PHP version ...
Continue reading
In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.Source: NVD (National Vulnerability Database) — ...
Continue reading
A security flaw has been identified in Ray, a tool some website developers use to build and test their projects. This is a code injection vulnerability, meaning bad actors could exploit it to run unauthorized, harmful code on any system where Ray is installed.The vulnerability can be exploited by attackers using Firefox or Safari web browsers. If ...
Continue reading
