PHP2Shell (CVE-2026-109618, CVE-2026-109619): critical PHP flaws — what to update
Two critical remote code execution flaws in PHP itself, CVSS 9.2. Fixed versions, temporary protections and how to check your servers.
Read article
CySec blog
Website security — articles and guides
All CySec articles about Website security: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
nginx vulnerabilities in 2026: which version you need and how to protect it
In 2026 nginx.org has published 26 advisories, including two rated “major”. The safe versions now are 1.31.7 and 1.30.6.
Read articleSecure nginx configuration: HTTPS, security headers and access limits
A practical checklist with ready-to-use snippets for a website or reverse proxy on nginx.
Read articleCompany website security: WordPress, plugins and hosting
A hacked website damages reputation, search rankings and can infect visitors. Practical steps to keep a business website safe.
Read articleReally Simple Security (CVE-2024-10924): a security plugin that let attackers log in as admin
An authentication bypass in a plugin installed on about 4 million WordPress sites. Ironically, it affected sites that had turned on two-factor authentication.
Read articleWordPress LiteSpeed Cache (CVE-2024-28000): any visitor could become an administrator
A weak security hash in a caching plugin used on millions of sites allowed unauthenticated privilege escalation. Update and check your admin users.
Read articleGiveWP donation plugin (CVE-2024-5932): remote code execution through a donation form
A PHP object injection in a popular donation plugin let unauthenticated attackers run code and delete files. What site owners should do.
Read articleCosmicSting (CVE-2024-34102): the flaw that compromised thousands of Magento stores
An XML external entity flaw in Adobe Commerce and Magento Open Source let attackers steal secret keys and, combined with another bug, run code. Patching alone was not enough.
Read articleJoomla (CVE-2023-23752): how a “medium” flaw exposed database passwords
An improper access check in Joomla 4 web service endpoints let anyone read the site configuration — including database credentials.
Read articleAtlassian Confluence (CVE-2022-26134): unauthenticated code execution in a company wiki
A zero-day in Confluence Server and Data Center let anyone run code on the server. Internal knowledge bases are rarely treated as critical — they should be.
Read articleLog4Shell (CVE-2021-44228): the logging library that shook the internet
One line of text in a log could give attackers full control of a server. Why Log4Shell still matters and how to make sure you are protected.
Read articleWP File Manager (CVE-2020-25213): a zero-day that let anyone upload files to WordPress
A file manager plugin with about 700,000 installations allowed unauthenticated file upload and code execution. A classic lesson about risky plugins.
Read articleDrupalgeddon2 (CVE-2018-7600): remote code execution in Drupal core
A flaw in Drupal's form handling let anyone run code on millions of Drupal sites. It is still scanned for today.
Read articleLet's make your IT secure and predictable
Tell us about your infrastructure and goals. We'll get back to you within one business day with next steps.