Security Advisories
We read the vendor and government advisories so you don't have to, and write up the ones that matter to small and mid-sized businesses in plain language.
October 20, 2026 · PHP security pre-announcement
PHP will ship an emergency fix at 14:00 UTC for two remote code execution flaws rated 9.2 (CVE-2026-109618, CVE-2026-109619). Nearly every website runs PHP. What to do today, and what to do once the fix is out.
Read the advisoryOctober 8, 2026 · Joint advisory CISA AA26-281A
A years-long campaign of webmail password spraying, automated mailbox theft through Exchange Web Services and cloud app credentials, and fake login prompts on compromised websites. Eight steps to take this week, starting with MFA on every way into email.
Read the advisoryOne short message when something needs action from you. No marketing, one-click unsubscribe.
We cover what our customers actually run: email platforms, WordPress and PHP hosting, file sharing, VPNs and firewalls. If an advisory needs a security team to act on, we usually skip it. If it needs a business owner or office manager to act on, we write it up.