Sucuri Malware Research Team
Sucuri
Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) can allow unauthenticated attackers to execute code on affected web servers. Both carry a CVSS v4.0 score of…
HTTP 401 Unauthorized: What It Means and How to Fix It
You load your site, or visit an API endpoint your app relies upon, and instead of a page you find a brief, unhelpful message: 401…
500 Internal Server Error: What It Means and How to Fix It
You load your own site, and instead of your homepage you get a blank page with a line of text reading 500 Internal Server Error.…
What Is Encryption? How It Protects Your Website and Its Data
If you run a website, you’ve already met encryption even if you’ve never used the word. It’s the 🔒 padlock in the browser bar, the reason…
Is My Site Hacked? (13 Signs)
Originally published: February 23, 2023 by Rianna MacLeod Is my site hacked? Most people don’t ask that out of nowhere — something already looks off.…
How to Prevent SSH Brute Force Login Attacks
Originally published: April 20, 2023 by Rianna MacLeod An SSH brute force attack is an automated login-guessing run against your server’s remote access service, and…
Vulnerability & Patch Roundup — September 2026
If you operate a website, you’re already aware that a single unpatched vulnerability can render your site inaccessible, compromise your reputation, or necessitate extensive remediation…
SC WordPress Malware: A Self-Healing Mesh of Loaders, Drop-Ins, and a Blockchain-Controlled Backdoor
Gabriel Barbosa Overview During recent website cleanup work, we analyzed a WordPress compromise where the same backdoor kept returning within seconds of every removal, no matter how…
How to Harden & Secure a Website (12 Steps)
Originally published: November 11, 2023 by Rianna MacLeod Attackers don’t care what platform you use. WordPress, Magento, Joomla, Drupal – every site is a potential…
How to Quickly Find & Fix Mixed Content Issues (SSL/HTTPS)
Originally published: August 23, 2023 by Rianna MacLeod With the web’s increased emphasis on security, all sites should operate on HTTPS. Installing an SSL certificate…
WooCommerce Security Essentials for Store Owners
Kyle Knight Running a WooCommerce store is awesome for your business – it opens up a whole world of opportunities. But let’s be honest, it also comes…