Earlier today PHP released fixes for two critical vulnerabilities, known together as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). These are flaws in PHP itself rather than in WordPress or any plugin, so they affect every PHP site, not just ours. We have spent the past few hours updating PHP on every site we host. Most are already patched, and ...
On Thursday evening (8th October), some of our clients received an email that looks like it came from Parrot Creative. It didn’t. It’s a scam. It was sent from [email protected] and uses employee names, photos, and email signatures. The subject line is “Immediate Action Required: Website Compliance and Renewal Before October ...