AI vs Human Security
Passive website security scan for small businessprofile updated 19m ago
7
10warm ≥10
101new in window
0replied
7 hot threads in 365 days, mostly r/StopBadBots — enough to sell Reddit Radar
Queries
is my website secure small businessfree website security scanwordpress site hacked helpsmall business cybersecurity checklistwebsite vulnerability scanner recommendationWhere it's discussed
—
-
14 hotreddit [For Hire] WordPress/Elementor dev, 15 yrs: hacked site cleanup, speed fixes, maintenance, white-label for agencies (opens in new tab)
Solo WordPress developer, 15 years. I fix and look after WordPress sites. \- Hacked or broken site cleanup, usually within 24h \- Speed and Core Web Vitals fixes on Elementor/Divi sites \- Migratio…
-
14 hotreddit [For Hire] WordPress/Elementor dev, 15 yrs: hacked site cleanup, speed fixes, maintenance, white-label for agencies (opens in new tab)
Solo WordPress developer, 15 years. I fix and look after WordPress sites. - Hacked or broken site cleanup, usually within 24h - Speed and Core Web Vitals fixes on Elementor/Divi sites - Migrations …
-
14 hotreddit I’m researching how people manage WordPress websites and Shopify stores — I’d love your opinion (opens in new tab)
Hi everyone, I’m researching how agencies, freelancers, and businesses manage WordPress websites and Shopify stores. I’m working on a platform intended to help with: monitoring website health perf…
-
14 hotreddit Google non profit? (opens in new tab)
Hello guys, first I am a tech person handle thing like website and stuff for my friend whom run a 503c org, he is not a tech person at all so that is why I am here, I try to handle the load that he co…
-
14 hotreddit steps for signing up of google nonprofit? (opens in new tab)
Hello guys, first I am a tech person handle thing like website and stuff for my friend whom run a 503c org, he is not a tech person at all so that is why I am here, I try to handle the load that he co…
-
14 hotreddit GoDaddy Managed WordPress site hacked — thousands of spam URLs, unauthorized Google Search Console owners, suspicious PHP files. Anyone experienced this? (opens in new tab)
I'm looking for advice from WordPress developers or security professionals who have dealt with a similar compromise. My business website, StudentHousingWorks.com, is hosted on GoDaddy Managed WordPre…
-
14 hotreddit [For Hire] [Remote] - Security code audits, WordPress fixes and AI agents (opens in new tab)
Hey, I'm a freelance dev based in Spain and I've got room for new projects. What I usually help with: - Security audits of web apps (OWASP Top 10). Not just a report, I can fix the issues on the live…
-
12 warmreddit Lawyer with a 287K-view TikTok and 0 clients. What would you do? (opens in new tab)
Hi all. I'm a lawyer in Spain, and a few months ago I started a small online immigration practice with two friends: residence permits, renewals, citizenship. Not sharing the name or any links. I just …
-
11 warmreddit OSV-Scanner: Vulnerability scanner written in Go which uses the data provided by osv.dev (11k stars) (opens in new tab)
What it does All text below is quoted directly from the project README. Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner supports a wide range of…
-
11 warmreddit [Hire me] Solo IT + SEO for small businesses: one person to handle your website, security and the tech headaches (opens in new tab)
Most small businesses can’t justify a full IT team, but still need someone who handles the website, the security basics, and the “why is this broken?” calls. That’s what I do. What I cover, as one po…
-
11 warmreddit When a WooCommerce store gets breached, what can the attacker actually read? (opens in new tab)
My notes on the 2026 WordPress security survey ended with something I rarely see in anyone's recovery plan, mine included: what personal data was in the database while the attacker had access? This ti…
-
11 warmreddit What small business website design services should include, and the part that is a racket (opens in new tab)
Every quote a local business gets should have four things in it, and most do not. Copywriting for at least the home page and one service page, because owners never send you the text. Real photos or a …
-
10 warmreddit F23, How do you guys verify Superyou Products? Ive purchased SuperYou Yeast Protein, and I do not see any particular code or scanner for purchase other than regular bar code which leads me to their website (opens in new tab)
I have purchased SuperYou Yeast Protein Kesar Badam Flavour and this is the only QR I see. But I do not see any stickers or any authentication methods on YouTube or on their site? Can anyone please g…
-
10 warmreddit What's the biggest cybersecurity mistake you've seen a small business make? (opens in new tab)
I was reading about how smaller businesses often don't take cybersecurity seriously until something goes wrong. It got me thinking about how many businesses probably still share passwords, ignore sof…
-
10 warmreddit Wordpress site hacked? Need advice (opens in new tab)
I have a WordPress catalogue website where I only display product images and catalogues A few days ago, I received an email saying my WordPress password had been changed, even though I hadn’t change…
-
10 warmreddit I need help with a website but I don’t like how cheap most of them look (opens in new tab)
i’m a small business owner and I’ve been on the hunt for a genuinely good quality website, if anyone has experience with someone that has a done great quality work then please let me know. I’m not int…
-
10 warmreddit Can anyone share some advice on dealing with a hacked WordPress website? (opens in new tab)
My website recently started having some issues: Random .html files containing gambling content are being generated in wp-includes and some plugin directories A user named tester appeared, and I have…
-
9reddit Hackers Are Working Overtime While Website Owners Are Sleeping (opens in new tab)
So we've spent the last 2 days talking about how most people don't have a recovery plan, how most only find out they got hacked when an outsider tells them, how much it actually costs, and how agencie…
-
9reddit Hostinger what gives! Account suspended without notice for "Phishing", and no details! (opens in new tab)
This is absolutely horrible, I don't have access to my backups or data, because the account is suspended, otherwise I could have restored my backups elsewhere and updated DNS, instead I am accused of …
-
9reddit WordPress and PHP security have changed. Do our habits need to change with it? (opens in new tab)
As you may have heard, the past few months have reshaped website design and website security. In the past, we assumed that the mature software we use every day would be secure and that only through s…
-
9reddit Tech Stack Advice Needed (opens in new tab)
Hi y'all. I'm looking for advice as I transition from Webflow to WordPress (please challenge any of my thinking if you disagree with any of my below decisions). I have a background as a front-end desi…
-
9reddit Observations from the enterprise side, where the hype train is starting to show cracks (opens in new tab)
There is a lot going on with the LLM businesses. The financial aspects are extensively & comprehensively covered, especially all the great work Ed has done. The major AI labs have been in the news fo…
-
9reddit 2 Weeks in Italy: Rome, Florence, Venice (Aug/Sept) + What We’d Do Differently (opens in new tab)
Basic Info · Who traveled: one couple, delayed honeymoon · When: late Aug / early Sept 2026 · Length: 14 nights, not including travel days · First trip to both Italy and Europe · Major stops: Rom…
-
9reddit honestly the 7.0 hacks really f#$ked me hard (opens in new tab)
i was someone who listened to the advice of people; enable wordpress auto-updates to keep your client sites secure well guess what? when 7.0 hit, between the time it auto-updated and the time i woke …
-
9reddit TopSyde - Free website checks for founders maintaining their own sites (opens in new tab)
I run TopSyde, and I'm sharing two free tools for founders and small business owners who look after their own websites. AI helped prepare this post. The first is a homepage audit: https://topsyde.com…
-
9reddit EU AI Act Just Hit WordPress Sites Using AI - Are You on the Hook? | Kat... (opens in new tab)
I recently interviewed Kathy Zant at WordCamp US 2026 about AI transparency, privacy, and security for r/Wordpress website owners. One of her most important points was that businesses outside the EU …
-
8reddit Where Can You Find Reliable WordPress Help and Resources? (opens in new tab)
WordPress has a huge collection of tutorials, plugins, themes, videos, and support forums. The challenge isn’t finding information. It’s deciding which information is current, accurate, and safe to fo…
-
8reddit Found critical vulnerabilities in my college ERP website – Should I report to my college or the ERP company first? (opens in new tab)
Hey everyone, I'm a student, and while exploring my college's ERP website, I discovered several security vulnerabilities in both the student and staff applications. Some of the findings are quite se…
-
8reddit Best WordPress vulnerability scanners for checking plugins and themes (opens in new tab)
A vulnerability scanner answers "does this installed version have a published security flaw?" That's different from asking whether somebody has already planted malware on your site. A plugin can look …
-
8reddit How do I test my website and api for vulnerabilities without cyber security expert (opens in new tab)
Hey everyone, I've been working on a website for a new solar installer company for the last 2 months - planning, designing, and building it myself. Site is: photongrid.vercel.app Goal is to help th…
-
8
-
8
-
8reddit Do you wanna know how these scumbags are using Cloudflare to make MILLIONS tricking folks online? (opens in new tab)
If you were ever browsing some sketchy site, or even just a normal WordPress blog, and out of nowhere your screen locked up with a massive alert saying your PC got blocked and you gotta call Microsoft…
-
8reddit Is shipping label companies customer service crap or is it me? (opens in new tab)
Really trying to get my small business live this weekend. Shipping label API integration is still on my list. Custom made website / not shopify, etsy, etc Shippo was sending the api confirmation emai…
-
8reddit How do you set out a limitation of liability clause in a scope of work agreement? (opens in new tab)
Hi, I'll get right into it. I typically make static and simple wordpress websites (between £400 and 800 ish). I've been doing this for a while now, and am very happy with it, but I recently closed a r…
-
8reddit :: When "Just Update WordPress" Isn't Enough (opens in new tab)
Every so often WordPress pushes a security release that's more than routine, and this is one of those weeks. WordPress 7.1.2 came out on September 22 to fix a critical bug that can lead to remote cod…
-
8reddit [HIRING] Independent Sales Agent — Lead Generation (1099, Commission-Based) (opens in new tab)
What You Get Paid $200 per qualified appointment that shows up and meets the criteria below 10% of first-year monthly recurring revenue on every deal that closes Independent Sales Agent — Lead Gener…
-
8reddit Need help with a hacked site SEO (opens in new tab)
Hello Thanks for your help in advance. My relative's wordpress site got hacked and as a result many spam pages were created which also wound up in Google search console and Google. More than 400k. Go…
-
8reddit Real Case Study: The worst advice for a hacked site. (opens in new tab)
Worst advice ever on WordPress sub: "Just install an AI agent in your server terminal to clean up malware" Last week I stumbled upon one of those posts on the WordPress subreddit that just makes…
-
7reddit Nobody Is Coming to Save You: One Single IP Hacked the World and Nobody Stopped It — This Is the Reality We Live In (opens in new tab)
TL;DR: Chinese hackers used a single, unmasked IP address for months to hijack nearly 1,000 devices and steal 18,500+ government records, proving how ridiculously easy cybercrime is when WordPress …
-
7reddit Nobody Is Coming to Save You: One Single IP Hacked the World and Nobody Stopped It — This Is the Reality We Live In (opens in new tab)
Man, this whole story is honestly mind-blowing. These Chinese hackers didn't even bother hiding their tracks. They literally used the exact same IP address for months to break into stuff all over the …
-
6reddit My agent swarm looked up HackTheBox write-ups to help a stuck teammate, so I threw out the run and locked the network (opens in new tab)
I've been building DreamTeam, an open-source (MIT) agent swarm with no orchestrator. Agents get one goal, a shared task board and a shared git folder, then they split the work and review each other. T…
-
6reddit Two decade-old PHP bugs, found with AI help, pushed European government sites offline (opens in new tab)
On October 21, the PHP Foundation disclosed two critical vulnerabilities. Researchers at OpenAI, Wiz, and Calif found them in August using frontier AI models. Both bugs had reportedly been hiding for …
-
6reddit Been soft destroyed my business (opens in new tab)
Spent four years building my painting business. Now I’m owed $460k and trying to figure out how to rebuild. I run a painting business in Melbourne, and honestly, this is a difficult post to write. F…
-
6reddit Updated to the site. All scan features are free to use now. No login or account needed. Feedback would be great!! (opens in new tab)
https://preview.redd.it/86c17pzzo7yh1.png?width=1177&format=png&auto=webp&s=c20ae8682027d537c2993afacb12ac249e7c72c6 https://www.sitegraded.com/
-
6reddit YSK: Passkeys and physical security keys make you immune to phishing (and if you buy physical keys, always get two (opens in new tab)
Why YSK: Passwords are fundamentally broken because they rely on you not getting tricked. If you click a malicious link that perfectly mimics a real login page, you might type in your password and han…
-
6reddit How to disable XML-RPC in WordPress, and when you should keep it (opens in new tab)
XML-RPC is an older way for another application to talk to WordPress. It can let a publishing app send posts or let a connected service perform tasks without using your normal dashboard. You don't ne…
-
6reddit AI Agents Cybersecurity Threats: 14 Hacks in Black October (opens in new tab)
If you run AI agents in your business, are the keys they run on actually safe right now? This month gave us a very clear answer, and it's why people are calling it Black October. It's the month AI a…
-
6reddit PSA: Check your WordPress site for PHP hacks (opens in new tab)
A little late on this, but if you run a WordPress site, check it for PHP hacks. Look for admin users you didn't create, .php files in your uploads folder, and strange scripts on your checkout page. If…
-
6reddit AI Found the PHP2Shell Vulnerability in 70% of Sites in Weeks (opens in new tab)
The PHP2Shell Vulnerability lets a complete stranger take over your website without ever logging in. It's been sitting inside PHP, the software behind roughly 70% of all websites, for more than 10 ye…
-
6reddit Why Are Small Businesses Vulnerable? (opens in new tab)
No business has to be large to become a target of a cyberattack. Small businesses can be attractive targets because they often have limited resources to prevent and respond to cybersecurity incidents.…
-
6reddit 7 Best Cybersecurity Awareness Services in 2026 (opens in new tab)
Cybersecurity awareness purchases often go wrong because buyers focus on the learner demo and leave one operational detail unresolved: who will run the program every month. Some providers supply soft…
-
6reddit I developed a 100% Free SEO Analyzer that fully audits your website in seconds.🚀 (opens in new tab)
Here is what you get instantly: ✅ Core Web Vitals (LCP, CLS, TBT) & 4 main scores (SEO, Performance, Accessibility, Best Practices). ✅ Live HTML analysis for meta tags, headings, and security. ✅ Ad…
-
6reddit I developed a 100% Free SEO Analyzer that fully audits your website in seconds.🚀 (opens in new tab)
Here is what you get instantly: ✅ Core Web Vitals (LCP, CLS, TBT) & 4 main scores (SEO, Performance, Accessibility, Best Practices). ✅ Live HTML analysis for meta tags, headings, and security. ✅ Ad…
-
6reddit I developed a 100% Free SEO Analyzer that fully audits your website in seconds.🚀 (opens in new tab)
Here is what you get instantly: ✅ Core Web Vitals (LCP, CLS, TBT) & 4 main scores (SEO, Performance, Accessibility, Best Practices). ✅ Live HTML analysis for meta tags, headings, and security. ✅ Ad…
-
6reddit I developed a lightning-fast, free SEO analyzer that fully audits your website in seconds.🚀 (opens in new tab)
Here is what you get instantly: ✅ Core Web Vitals (LCP, CLS, TBT) & 4 main scores (SEO, Performance, Accessibility, Best Practices). ✅ Live HTML analysis for meta tags, headings, and security. ✅ Ad…
-
6reddit Threats Are Evolving, But Website Security Is Stalled at 26% (opens in new tab)
TL;DR: WordPress security data barely moved from 2025 to 2026—concern and preparation are completely stalled while attacks get smarter. Stop waiting for a disaster. A recent survey compared 2025 to …
-
6reddit Welcome to r/WorldNgayon — digital intelligence for the AI-powered world (opens in new tab)
This community is the official home of WorldNgayon.com on Reddit. Who we are: a Filipino-led digital intelligence platform covering AI, cybersecurity, digital money, and the working lives of global p…
-
6reddit HTTP Terminator, an Unsupervised AI That Invents New Desync Attacks: James Kettle at Offensive AI Con 2026 (opens in new tab)
What if a fully unsupervised system could invent new attack techniques, test them on live websites and use the results to find even more? James Kettle built a system to answer that question, and he r…
-
6reddit Google Ads flagged 83 client ads as “Compromised Site” even though the website looked clean (opens in new tab)
Recently dealt with a Google Ads case that might be useful to anyone currently stuck on the Compromised Site policy. Client runs a cleaning-services business in the UK. Their website looked normal. …
-
6reddit Google Ads flagged 83 client ads as “Compromised Site” even though the website looked clean (opens in new tab)
Recently dealt with a Google Ads case that might be useful to anyone currently stuck on the Compromised Site policy. Client runs a cleaning-services business in the UK. Their website looked normal. …
-
6reddit Google Ads flagged 83 client ads as “Compromised Site” even though the website looked clean (opens in new tab)
Recently dealt with a Google Ads case that might be useful to anyone currently stuck on the Compromised Site policy. Client runs a cleaning-services business in the UK. Their website looked normal. …
-
6reddit Is Tailscale Safe for Business? The Hidden Dangers of Ungoverned Mesh VPNs (opens in new tab)
https://preview.redd.it/kzbwc3n2rosh1.png?width=2160&format=png&auto=webp&s=5714363c668ab56f4816b615a0aab3f028a6ceb2 https://blog.openvpn.net/is-tailscale-safe-mesh-vpn-risks There may be a VPN on y…
-
6reddit Security panel on the 2026 WP security survey: the parts I did not have in my notes (opens in new tab)
I posted my notes on the Melapress 2026 WP security survey here on 19 September. Melapress has now published a one-hour panel where four security people compare the survey numbers with what they see i…
-
6reddit I've been automating work for small businesses since 2022. Tell me the one job that eats your week and I'll reply with exactly how I'd take it off your plate (opens in new tab)
Hey all - I wanted to share a bit of my experience automating business processes with AI over the past few years. I started in 2022, around when ChatGPT became public, and my background is in software…
-
6reddit Malaware i think (opens in new tab)
I accidentlly gone to a website and tricked me as it was a microsoft software which made me to win +r and that thing in yhe fjrst photo some lines of words and ig i got a malware what to do. My mcafee…
-
6reddit The Google/Client hazard most people miss: Every day I see site owners losing time while their infected site stays exposed (opens in new tab)
42.6% of WordPress Pros Find Out They're Hacked Because an Outsider Told Them, Not Their Own Team. I’ve been seeing a ton of posts lately from people freaking out over site issues, thinking it’s j…
-
6reddit Should I start reaching out to potential clients before the website is built or after? Currently, there's a "website is coming soon" page. (opens in new tab)
I'm currently building my website. I think it'll take some time (1-3 months, bare minimum, and it may take longer), as I need to learn more about web development, the basics of web security, UI/UX, …
-
6reddit WordPress site compromised after Crazy Domains migration – malicious index.php backdoor and fake ecommerce site (opens in new tab)
Hi everyone, I'm hoping someone with WordPress/security or hosting experience can give me some advice. I'm helping with a small business website in New Zealand and we're really struggling to get usef…
-
6reddit Down from 43.6% to 41.5% in Months: Is 2026 the Beginning of the End for WordPress? (opens in new tab)
Wordpress market share is dropping like a stone this year and it is honestly wild to watch. According to W3Techs, WP hit its peak early 2025 at 43.6 percent of all websites. Then by Jan 2026 it slippe…
-
5reddit At a crossroads; continue with Wordpress or use an SaaS (opens in new tab)
This is my first time building a directory AND using WordPress with hosting. I was using a really flexible theme, Voxel, together with using Elementor, and was working on a couple of new features when…
-
4reddit Passed With Self Preparation With AI ~ 10 days (opens in new tab)
Self study , used chatgpt to study overview of all domain claude to build the interactive learning with animations flow and lab to test myself out. Update 1 : Below is the prompt i used in claude c…
-
4reddit PSA #2: 6 Modrinth mods installed a hidden browser extension that records your passwords and cookies (Chrome, Edge, Opera, Opera GX, Brave) (opens in new tab)
Disclosure: I run modgrade, a free site that checks Minecraft mods. These six were found by Haxy (x.com/clienthax), who reported them to us and to Modrinth. We decompiled the six mods and the program …
-
4reddit Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress Ecosystem (opens in new tab)
Today we're introducing the Wordfence Threat Response Team, led by Alex Thomas and made up of some of our most experienced researchers and threat analysts. It's a small, hands-on team focused on tur…
-
4reddit Up to 72% of Rochester business websites are vulnerable to PHP2Shell (opens in new tab)
Please pass on the word if you know a local business. We ran a scan of all known Rochester businesses and their public facing websites/web services and found up to 72% are running a PHP-based service …
-
4reddit Japanese keyword hack and pharma spam in WordPress: how to find and clean SEO spam (opens in new tab)
Your homepage looks fine, but Google lists your site selling medicine or showing Japanese shopping titles. That's search spam: someone is using your site's pages or reputation to advertise things you …
-
4reddit your AI-built app is probably fine. the old server next to it might not be (php2shell + node, oct 21) (opens in new tab)
Quick one, because this week is a good reminder of something most of us skip. On Oct 21 two security releases landed on the same day. PHP (php2shell, CVE-2026-109618 / CVE-2026-109619). Critical, no…
-
4reddit KIBERNETINIO SAUGUMO RADAR - 2026-10-22 (opens in new tab)
Raudona – aktyviai vykstančios atakos Eksploatacija patvirtinta „in the wild“, reikalingi skubūs veiksmai per 24–72 val. „PHP2Shell“: PHP išleido skubias pataisas dviem kritinėms RCE spragoms, o išn…
-
4reddit Vulnerability Issue in PHP-Based Websites (WordPress, Prestashop, etc.) (opens in new tab)
CERT-EU (the EU Computer Emergency Response Team) has issued a critical security advisory (Security Advisory 2026-018) regarding PHP. Since most websites are built using PHP, it’s important to be awar…
-
4reddit Your WordPress site can be fully updated and still get hacked (opens in new tab)
I know. That's not what we've been telling everybody for years. But a new one making the rounds is a good reminder that sometimes the problem isn't an outdated plugin. Sometimes the attacker is hold…
-
4reddit Enterprise Security Awareness Training for Large Teams (opens in new tab)
On average, 1 in 3 employees at organizations without security training will fail a simulated phishing test: clicking a link, submitting credentials, or opening an attachment they shouldn’t. That’s th…
-
4reddit I developed a 100% Free SEO & GEO Analyzer that fully audits your website in seconds.🚀 (opens in new tab)
Here is what you get instantly: ✅ Core Web Vitals (LCP, CLS, TBT) & 4 main scores (SEO, GEO, Web Performance, Accessibility). ✅ Live HTML analysis for meta tags, headings, and security. ✅ Advanced …
-
4reddit I work 9:5 at Construction side and 5:9 build a security tool yay. My friends ship client sites faster, but security became the missing step. (opens in new tab)
I’m electrician during the day. Most days I wake up early, spend 9–10 hours on site, come back exhausted, go to the gym, eat, shower, and tell myself I’ll work on my project for “just an hour.” Then…
-
4reddit I work as an electrician during the day and build a security tool at night. AI helped my friends ship client sites faster, but security became the missing step. (opens in new tab)
I work as an electrician during the day. Most days I wake up early, spend 9–10 hours on site, come back exhausted, go to the gym, eat, shower, and tell myself I’ll work on my project for “just an hou…
-
4reddit AI Agents Just Hacked 429 WordPress Sites in 61 Seconds: The AI Hacking Assembly Line Is Here! (opens in new tab)
Cybersecurity researchers over at SOCRadar just uncovered something that honestly blows my mind. A cybercrime crew called CyberXero is using AI agents to turn hacking into a full-blown assembly line, …
-
4reddit Quantifying Third-Party Breach Risk With People at Risk: Christine Dewhurst and Thomas Lee at SecTor 2026 (opens in new tab)
A 0.07% chance that any single vendor leaks your data sounds negligible until it is multiplied across hundreds of vendors. Most third-party risk programs vet vendors one at a time with questionnaires…
-
4reddit Stop letting bots hammer your WordPress logins. Let's lock down your traffic at the edge (opens in new tab)
Hey everyone, Jim Walker here. Some of you might know me as The Hack Repair Guy. I’ve been running servers and cleaning up compromised WordPress environments out of San Diego for a couple of decades n…
-
4reddit How to Evaluate Vulnerability & Patch Management Software: A Practical POC Checklist (opens in new tab)
Choosing vulnerability and patch management software is not simply about comparing feature lists or watching product demos. A platform may look impressive in a presentation but perform very differentl…
-
4reddit A 27B local cyber model compressed to 15.7 GB — 262K context, GGUF, and built for authorized security work (opens in new tab)
A new local cybersecurity-focused model worth watching: 🔗 OrcaSAQ-2 Cyber 27B Uncensored GGUF https://huggingface.co/orcarouter/OrcaSAQ-2-Cyber-27B-Uncensored-GGUF It is a quantized GGUF release o…
-
4reddit My WordPress site got hacked: the first 60 minutes, step by step (opens in new tab)
I do support at DevDome, and we build a malware scanner, so hacked WordPress sites end up in our inbox pretty often. The pattern is almost always the same. Someone finds the hack, panics, deletes the …
-
4reddit KIBERNETINIO SAUGUMO RADAR - 2026-09-25 (opens in new tab)
Raudona Grėsmė stipriai suaktyvėjo, atakos vyksta dabar F5 BIG-IP APM nulinės dienos spraga leidžia vykdyti kodą be prisijungimo. F5 paskelbė pataisas CVE-2026-94127 — kritinei Access Policy Manager…
-
4reddit The "Invisible" Compromise: Why 2026’s Infostealer Surge Means Your Perimeter Defense is Already Useless (opens in new tab)
Hey everyone, I spend my days doing digital forensics and corporate incident response. Lately, my team has been pulled into a staggering number of cleanups that all share a terrifyingly identical nar…
-
4reddit CanoP - a local scanner that catches vulnerabilities generated by coding assistants (opens in new tab)
Been messing around with this for a few months. Kept noticing my coding assistant had the same handful of issues - hardcoded secrets, missing auth checks, that kind of thing - so I put together a sca…
-
4reddit Navidrome 0.64.0 Released! Check breaking changes! (opens in new tab)
https://github.com/navidrome/navidrome/releases/tag/v0.64.1 This release brings an experimental Jellyfin Music API, so Jellyfin-compatible music clients like Finamp and Jellify can now connect to Nav…
-
4reddit Boss is pushing for certs (opens in new tab)
Hi all, I’m a sysadmin with 2 full time helpdesk guys, org of 220 in 5 locations. I started in regular business office 10 years ago doing sales. 7 years ago I transitioned to IT and became our first …
-
4reddit [Release] ZenFM - Zen File Manager (opens in new tab)
Hi everyone, today I’m releasing a project I've been working on for a while now. ZenFM, a web based file manager designed specifically for e-readers running KOReader. ZenFM is a clean-break successo…
-
4reddit [App] [Promotion] GiveAway Lifetime Codes for NetBlade: WiFi & LAN Scanner (opens in new tab)
NetBlade turns your phone into a complete network toolkit — scan your LAN, probe ports, analyze Wi-Fi, run pro diagnostics and even SSH into your servers, all in a clean, modern, privacy-first interfa…
-
4reddit Built a privacy scanner and tested startupindia website, it explicitly sends public IP parameters to FAANG(GA4, MS Clarity, Meta Pixel) (opens in new tab)
What fires on load: Google Analytics 4 (G-42QP5D4V7R): Fires a custom event ip_address with ep.IP_Address=<my public IP>. GA already sees your IP at the network layer; this site explicitly passes it…
-
3
-
3
-
3reddit 90% of vibecoded apps will probably get hacked (opens in new tab)
I use reddit daily and I see people building full saas with lovable, bolt, replit and other tools like these all the time. So I got curious about something that I dont see discussed that much: once y…