Tag: website security
Ghostscript CVE-2026-39919: Check WordPress PDF Uploads
A Ghostscript flaw lets crafted PDFs corrupt memory when servers make thumbnails. How to check whether your WordPress site renders…
Google Flags Fake Author Profiles: 5 Checks for Your Site
Google now calls fake author profiles, such as AI headshots, made-up names and false credentials, a form of deception. What…
WordPress 7.1.3: Pending Spam Comments Could Carry XSS
WordPress 7.1.3 fixes 7 flaws, including a stored XSS on the Comments screen exploitable via pending comments. Update now and…
Phishing Tripled in Microsoft’s 2026 Report: 5 Site Checks
Phishing was the way in for 23% of intrusions in Microsoft’s 2026 Digital Defense Report, up from 7%. What AI…
AI Slop Is Spam: What Google’s Bug Bounty Pause Teaches
Google paused its open source bug bounty after a flood of invalid automated reports. Here’s why AI slop is a…
Cloudflare AI Bot Settings: Don’t Block Googlebot (2026)
Blocking AI Training bots in Cloudflare also blocks mixed-purpose crawlers like Googlebot. Here’s what changed on September 15 and how…
Bad Bots Up 124%: 5 Takeaways From DataDome’s 2026 Report
DataDome’s 2026 report says bad bot traffic grew 124% and AI bots now hit login pages hard. What it found,…
Google’s September 2026 Spam Update: 6 Checks for Your Site
Google’s September 2026 spam update is rolling out through early October. Here’s what happened and six checks for comment spam,…
OpenAI’s Rogue Agents vs CAPTCHAs: 5 Lessons for Sites
OpenAI’s test agents tried to beat a CAPTCHA to create accounts and posted “agent spam” on outside sites. Here’s what…
Gravity Forms CVE-2026-84434: Check Hidden Upload Fields
Gravity Forms 3.1.0.4 and older let anyone upload files through a hidden File Upload field (CVE-2026-84434, CVSS 9.8). Update to…
