Railway Is Down and Says Secrets May Have Leaked. What to Do Now
Railway brought builds back for Enterprise at 03:32 UTC and for Pro at 06:29 UTC on October 22. Hobby, Free and Trial still wait, and every user should still rotate their keys.
Topic hub
Security News
Security news for people who run a business website. What broke, who it hits, and what to do.
4 stories, 4 guides, 19 key terms
Latest Security Stories
WordPress 7.1.2 Fixes a Critical Flaw Attackers Are Already Using
A core WordPress bug let attackers load PHP files without logging in. Attacks began within hours of the fix, and CISA now lists it as exploited.
Attackers Target Upload Flaws in Two WordPress Form Tools
Wordfence says it blocked more than 440,000 attempts to abuse file upload bugs in Super Forms and Elementor Pro. Both have fixes.
Popular WordPress Backup Plugin Had a Site Takeover Bug
A flaw in All-in-One WP Migration and Backup could be set off when an owner restores a backup. Version 7.110 fixes it.
Learn the Basics
Guides
- The Small Business Website ChecklistA good local business website is owned by you, loads securely on phones, makes it easy to call or book, and gets checked on a regular schedule.
- SSL Certificates Explained for Business OwnersAn SSL certificate locks the connection between your site and each visitor, and most local businesses only need a free one that renews on its own.
- Your Connection Is Not Private: How Site Owners Fix ItYour Connection Is Not Private means the browser could not trust the certificate your site showed it. If one visitor sees it, check their clock and their Wi-Fi. If everyone sees it, the fix is yours. The certificate is expired, made for a different name, or signed by nobody the browser trusts.
- Email Deliverability: SPF, DKIM and DMARC ExplainedSPF, DKIM and DMARC are three DNS records that prove your email is really from you, and big inbox providers now require them from bulk senders.
Free tools
- Email Security CheckerCheck SPF, DKIM, DMARC and MX in one go.
From T3CHS, not the news desk
Hosting With Updates Watched
We keep site software patched and backed up for small business sites.
See Hosting