Category: Security
Threats, advisories and practical hardening for South African businesses.
-
PHP2Shell: two critical PHP flaws, and what to do this week
PHP shipped an emergency release on 21 October fixing two unauthenticated remote code execution flaws. Every PHP installation serving web requests is affected. Here is the practical response.
-
An AI-built website was compromised six days after launch
A South African site built with an AI tool was taken down six days after going live. The admin password was sitting in the page source. What it means if you are shipping AI-built software.
-
A login screen is not access control
A South African franchise exposed internal data through a dashboard that had a login page. The data was being sent to the browser before anyone logged in. The lesson applies to almost every internal tool.
-
Your backup is only a backup if ransomware cannot reach it
Most businesses that lose data to ransomware had backups. The backups were on a share the ransomware could write to. The 3-2-1 rule, and how to test it honestly.
-
The VPN is retiring, and good riddance
The corporate VPN was designed for a world where the office was the network. It is slow, it is a single point of failure, and it gives everyone far more access than they need.
Ready when you are
Ready to make the switch?
Tell us what you are running today and we will show you what it looks like on Cloud29: costs, migration plan and timelines. No obligation.