Sucuri Firewall Archives

Critical PHP Security Update: Two RCE Flaws (CVE-2026-109618, CVE-2026-109619)

Sucuri Malware Research Team

October 21, 2026

Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) can allow unauthenticated attackers to execute code on affected web servers. Both carry a CVSS v4.0 score of…

Read the Post

What Is Encryption? How It Protects Your Website and Its Data

Sucuri

October 12, 2026

If you run a website, you’ve already met encryption even if you’ve never used the word. It’s the 🔒 padlock in the browser bar, the reason…

Read the Post

How to Build WordPress Campaign Pages Without Creating Content Debt

Third-Party Script Security: How Tags, Pixels, and Embeds Can Put Websites at Risk

Sucuri

August 24, 2026

Third-party scripts are common on websites. They help with analytics, ads, live chat, social media, video, payments, and many other features. While not all are…

Read the Post

What Is a Website Attack Surface? A Beginner’s Guide to Reducing Risk

Sucuri

August 19, 2026

Each feature that you add to a website results in a new element that has to be managed. The credentials are accepted by a login…

Read the Post

PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive

Kyle Knight

June 23, 2026

A working checkout page is often the moment a business starts to feel real. The products are live, the cart is functional, payments are flowing,…

Read the Post

DNSSEC: The Extra Security Layer That Can Break Your Padlock

Marc Kranat

May 4, 2026

Turning on DNSSEC makes your domain more secure — but if it’s misconfigured, newer certificate validation rules can stop SSL renewals in their tracks. Hey…

Read the Post

Shadow Directories: A Unique Method to Hijack WordPress Permalinks

Puja Srivastava

January 30, 2026

Last month, while working on a WordPress cleanup case, a customer reached out with a strange complaint: their website looked completely normal to them and…

Read the Post

Google Sees Spam, You See Your Site: A Cloaked SEO Spam Attack

Puja Srivastava

January 8, 2026

We recently handled a case where a customer reported strange SEO behavior on their website. Regular visitors saw a normal site. No popups. No redirects.…

Read the Post

How to Fix the ERR_TOO_MANY_REDIRECTS Error

Maninder Toor

November 13, 2025

Encountering the ERR_TOO_MANY_REDIRECTS error (also called a redirect loop error) can be frustrating, especially when your website was working fine just moments ago. This issue…

Read the Post