When a security issue hits a big part of the web, we explain it in plain English: what happened, whether your site or app is likely affected, and what to do. We only cover issues that matter to small business sites and apps, and every alert links to the official sources.
Two flaws nicknamed "php2shell" let attackers take over web servers running PHP, including WordPress sites, without logging in. Fixes are out, and attacks are confirmed.
Check if: your site runs on WordPress, WooCommerce, Drupal, Joomla, Magento or other PHP software.
The "ChainDrop" worm slipped malware into hundreds of popular JavaScript packages to steal hosting, cloud and code account credentials from developers and build systems.
Check if: your site or app is custom-built with React, Next.js, Vue, Node.js or React Native.
Tell us what you heard about and what your site or app is built with. If it affects you, we'll explain what it would take to fix and what it would cost.