Recent newsletters
Security alerts, new features, and tips for managing WordPress and Joomla sites at scale. Subscribe or grab the RSS feed.
Get the next one in your inbox
Occasional updates: security alerts, new features, and tips. No spam, unsubscribe any time.
- Latest
Twenty flaws we found, fixed in a fortnight
15 September 2026
Five new tools, and the Joomla 3 numbers nobody wants
31 August 2026
A CVSS 10.0 in Fabrik, and 23 more we found in Gridbox
10 August 2026
Seven Joomla extension flaws, and one was handing out customer invoices
27 July 2026
Update RSFiles! now: an unauthenticated flaw let anyone run code on your site
10 July 2026
Another Joomla Extension zero-day, and another extension provider drops Joomla 3 support
9 July 2026
Five Joomla extensions, one repeating security mistake
29 June 2026
Two more Joomla zero days today (that's three this week)
15 June 2026
The JCE attack is rolling into the weekend: botnets spraying the Profiles exploit
13 June 2026
JCE patched three times in a week, plus manage every site from Claude
8 June 2026
JCE 2.9.99.4, ten Joomla security patches, and the Avada Builder fix
28 May 2026
Service improvements, Joomla 6.1 guides, and three WordPress supply chain attacks
16 April 2026
Five CMS vulnerabilities in two weeks, all sharing one root cause: AJAX endpoints
7 April 2026
Smart Slider 3 flaw hits 800K WordPress sites, plus a Joomla TinyMCE fix
26 March 2026
Your Joomla robots.txt might be blocking Google, plus four new guides
19 March 2026
Take back control of automatic updates in WordPress and Joomla
12 March 2026
Astroid Framework security alert, new blog posts, and AI malware analysis
7 March 2026