Hancocks IT

Daily briefing 27 October 2026

Each morning: website security and anything else that might affect a small business in southern Sweden, in plain words.

Critical PHP flaws now confirmed exploited: check your site is on a patched version

Two critical flaws in PHP, the language that WordPress and most small business websites run on, were fixed on 21 October. Researchers have now confirmed successful attacks that let someone take over a server without logging in, and on 26 October the US agency CISA added both flaws to its list of known exploited vulnerabilities. Any site running PHP 8.2 to 8.5 is affected, including WordPress and WooCommerce shops. If you're on shared hosting, ask your host or check the PHP version in your control panel: it should be 8.2.35, 8.3.36, 8.4.27, 8.5.12 or newer. If you run your own server, update PHP now and look for signs of a break-in, as Sweden's CERT-SE advises.

Sources: bleepingcomputer.com · cisa.gov · cisa.gov · cert.se

Want to talk it through?

For advice on any of this, ring Svarslinjen (+46766860150) or see svarslinjen.se.

A normal call on your phone bill, plus Svarslinjen's minutes: the first three are free.

If your website or email needs looking at, tell Hancocks IT what's up or start with the free PHP checker.

From Andy

All articles

Earlier briefings

How calls are charged

The number is answered by Svarslinjen, an AI phone line Andy also runs. Say "Hancocks IT" as soon as it answers, or read out your ticket number, and you're put through.

Your phone company charges a normal call, as for any call to a Swedish mobile number.

Once you're put through to Hancocks IT, there's nothing more to pay for the call. The few seconds before that count as Svarslinjen minutes, and a new number gets three free.

Questions that aren't about a job are answered by Svarslinjen on its own minutes: the first three are free, and after that you buy minutes at svarslinjen.se.