Announcements

MA-1479.072026: MyCERT Advisory - Recent Ransomware Activities Observed: Best Practices for Prevention and Mitigation

  • 18th August 2026
On July 26 2026, Malaysia’s national cybersecurity response team (MyCERT) released an advisory noting that recent ransomware attacks have been actively observed targeting digital systems, including websites and web hosting environments.Ransomware is a type of harmful software that locks access to your site, its stored data, or connected systems, ...
Continue reading

CVE-2026-46420 (matched: php)

  • 18th August 2026
A security flaw has been identified in setup-php, a common tool used to configure PHP for automated project workflows run on GitHub's Actions system. The flaw impacts all versions of the tool from 2.25.0 up to (but not including) 2.37.1.This tool pulls PHP version details from files stored in a project's code repository, including .php-version, ...
Continue reading

CVE-2019-11049 (matched: php)

  • 18th August 2026
A security flaw has been found in specific versions of PHP, the software that powers many websites, when it runs on Windows servers. The issue affects PHP 7.3.x versions older than 7.3.13, as well as PHP 7.4.0. It is triggered when your website uses PHP’s built-in mail() function to send emails with custom headers written in lowercase, and is ...
Continue reading

CVE-2026-15748 (matched: wordpress)

  • 18th August 2026
A security vulnerability has been found in the Forminator Forms plugin for WordPress, a tool used to add forms and file upload features to WordPress websites. The flaw impacts every version of the plugin up to and including version 1.56.1. This issue lets people who do not have an account or login access to your site upload dangerous files that ...
Continue reading