Category: Security
PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619): 7 Simple, Safe Fixes for Sri Lanka Websites
The PHP2Shell vulnerability is an urgent warning for every business running a WordPress website, online store or custom PHP portal. In late October 2026, the PHP team disclosed two critical remote code execution flaws (CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2) that allow unauthenticated attackers to run commands on unpatched servers before application code even…
AI Scams and Deepfake Phishing: How Sri Lanka SMEs Can Protect Their Business
AI scams are no longer something that only happens to big companies overseas. Today, a criminal can copy a voice from a short video, write a perfect email in seconds, and even fake a live video call. For a small business in Kurunegala, Kandy or Colombo, where most payments are approved over WhatsApp or a…
WordPress Maintenance Checklist for Sri Lanka SMEs
A WordPress website is not “set and forget.” For Sri Lanka SMEs—shops, clinics, hotels, tuition centres, and service firms in Kurunegala and beyond—quiet neglect often hurts more than a dramatic hack. Pages slow down, forms stop sending, plugins conflict after an unsupervised update, or an old admin account sits unused for months. A simple WordPress…
Signs Your WordPress Site Is Hacked and How to Recover
If your WordPress site suddenly looks wrong, sends spam, or Google warns visitors away, you may be dealing with a compromise—not a random glitch. For Sri Lankan service businesses, having your WordPress site hacked can mean lost leads, damaged trust, and days of downtime while customers look elsewhere. This guide covers clear warning signs, a…
Beyond the Password: Why 2FA is Non-Negotiable in 2025
We’ve all been there: choosing a complex password with uppercase letters, symbols, and numbers, thinking our accounts are “unhackable.” But in 2025, a password alone is no longer enough, which is why 2FA matters. Data breaches and sophisticated phishing attacks have made passwords the weakest link in the security chain. Enter Two-Factor Authentication (2FA)—the single…
