🛡 First Plex, now PHP...
20+ million websites and servers at risk of being silently hacked.

A couple of pretty serious security issues worth knowing about if you run a website or home server.

Plex has confirmed attackers are breaking into outdated servers. Now PHP, which runs behind a lot of websites including WordPress, has had two critical security flaws disclosed.

Basically, affected setups can let someone run code on your server without logging in.

Ask your host whether they've applied the new PHP security fixes. Updating WordPress alone doesn't necessarily cover it. If it wasn't automatic you should assume its already compromised.

Want a hand securing your setup?

I can help check updates, what's exposed to the internet and your backups.

Message me @ftsdm with what you're running and I'll let you know what's involved 👍

PHP details · Plex advisory

I've been hearing more about scammers using AI to impersonate people over the phone. If you haven't spoken to your family about this yet, it's worth doing.

AI can create a convincing imitation of someone's voice from a short recording, sometimes just a few seconds. A clip posted publicly on social media can be enough.

Combine that with public information about your family and a scammer has the ingredients for a believable emergency call asking for money.

This is another reason to check what strangers can see on your social media. Family relationships, contact details and personal posts can give scammers information to work with. Help your family check their privacy settings too.

If someone calls claiming to be a family member in trouble, don't rely on recognising their voice. Hang up and call them on a number you already know is theirs before sending money or sharing sensitive information.

Have that conversation now, before anyone has to make a decision under pressure.

For more practical tips on privacy, AI and staying safe online, join my Telegram Channel: @freedomtechsolutions