
Railway Is Down and Says Secrets May Have Leaked. What to Do Now
Railway brought builds back for Enterprise at 03:32 UTC and for Pro at 06:29 UTC on October 22. Hobby, Free and Trial still wait, and every user should still rotate their keys.
Web hosting, domains, email and websites for local business
Call or text (949) 65-T3CHSFree toolsRSSTalk to us
Stack Advisor
Tell the T3CHS Stack Advisor how you run. It asks a few questions and ranks picks from our checked catalog. Or browse the company directory.
From the T3CHS News Desk

Railway brought builds back for Enterprise at 03:32 UTC and for Pro at 06:29 UTC on October 22. Hobby, Free and Trial still wait, and every user should still rotate their keys.
We rebuilt the website for Amba Mediterranean Grill in Joliet as a motion concept. The page opens on an empty bowl, and every ingredient drops in as you scroll.
The rollout ended October 8 after 13 days and 16 hours, far longer than any spam update this year. A guide to reading your own numbers now that it is over.
A tailoring website went around Instagram with the claim that AI could not make it. We took that as a friendly challenge and built Vyebe Custom Suits with AI from start to finish.
A core WordPress bug let attackers load PHP files without logging in. Attacks began within hours of the fix, and CISA now lists it as exploited.
The update applies to all languages and may take up to two weeks. Below is how to tell if your site was hit, and what not to panic about.
A Financial Times report says Gen Digital made an early approach to buy GoDaddy. Neither company has confirmed it, and nothing changes for customers yet.
Our news desk works apart from sales. T3CHS sells hosting and domains, and we say so on every story that touches them. How we write news.
From T3CHS, not the news desk
Most owners come to us with a site, a domain and an email login spread across three companies. We put it in one place, in the right order, so email keeps working.
By topic
News about web hosts, outages, deals and plan changes that affect small business sites.

A researcher found that Cloudflare Containers could hand one customer old disk data left by another. Cloudflare fixed it the same day and says no action is needed.
Security news for people who run a business website. What broke, who it hits, and what to do.

A core WordPress bug let attackers load PHP files without logging in. Attacks began within hours of the fix, and CISA now lists it as exploited.
Wordfence says it blocked more than 440,000 attempts to abuse file upload bugs in Super Forms and Elementor Pro. Both have fixes.
Search, email and software changes that land on a small business owner's desk.
The update applies to all languages and may take up to two weeks. Below is how to tell if your site was hit, and what not to panic about.
New Workspace admins can pull past email from any IMAP provider while they set up. It covers one user, which fits a lot of small businesses.
AI tools that small businesses can use today, and what they change for your site and your customers.

Some US Shopify sellers learned by email that buyers can now check out inside Google AI Mode and Gemini. This post covers what it changes and how to turn it off.
Google's automation tool for Workspace can now react to events in other apps, call webhooks and connect to eight outside services in beta.
Domain names, registries and ICANN rules, explained for owners who just want their name to work.

Verisign is ending names like john.smith.name and the email forwarding that came with them. The cutoff is February 2027, even for names paid past it.
Changes to website builders, browsers and design tools that shape how your site looks and works.
The new Chrome release patches 108 security bugs, 11 of them rated critical. Restart your browsers, and give your website a quick test.
Squarespace's September update rebuilds its Blueprint AI site maker, adds an AI image tool and brings text message marketing into the platform.
Free, no sign up
Guides
Pick a short name customers can say and spell, get the .com if you can, and register it to your business with auto-renew turned on.
Most local business sites do well on managed WordPress or good shared hosting, as long as it includes free SSL, backups, updates and real support.
Pick a provider like Google Workspace or Microsoft 365, create mailboxes, point your MX records to it, then add SPF, DKIM and DMARC.
An SSL certificate locks the connection between your site and each visitor, and most local businesses only need a free one that renews on its own.
For your trade
A plumber needs a call button on every page. A dental office needs forms that keep patient details private. We build for the job you actually do.
Coming soon
Our email briefing is not open yet. Until it is, follow every story by RSS.
Follow by RSSLaunch Spotlight
Launched something new in tech? Answer a few questions and we will write a free feature about it.
Get FeaturedFrom T3CHS
Tell us what you have today. We will tell you what to keep, what to move and what it costs.