Also on bkdevops.lk: https://bkdevops.lk/php2shell-vulnerability-fix-sri-lanka-smes/ The PHP2Shell vulnerability is an urgent warning for every business running a WordPress website, online store or custom PHP portal. In late October 2026, the PHP team disclosed two critical remote code execution flaws ( CVE-2026-109618 and CVE-2026-109619 , both rated CVSS 9.2) that allow unauthenticated attackers to run commands on unpatched servers before application code even runs. For a business in Colombo, Kandy, Kurunegala or anywhere in Sri Lanka, a server compromise can expose customer records, deface pages or turn a website into a spam relay. This guide explains how the PHP2Shell vulnerability works, how attackers use it to drop hidden web shells, the signs of compromise to check today, and seven simple, safe steps to patch and harden your server. What is the PHP2Shell vulnerability (CVE-2026-109618 and CVE-2026-109619)? On 21 October 2026, the PHP project released emergency updat...

Also on bkdevops.lk: https://bkdevops.lk/ai-scams-deepfake-phishing-sri-lanka-smes/ AI scams are no longer something that only happens to big companies overseas. Today, a criminal can copy a voice from a short video, write a perfect email in seconds, and even fake a live video call. For a small business in Kurunegala, Kandy or Colombo, where most payments are approved over WhatsApp or a quick phone call, that is a real risk. The good news: you do not need expensive tools to stay safe. Most AI scams still depend on one thing: getting someone to act quickly without checking. This guide explains how these scams work, the warning signs, and simple habits that protect your money, your accounts and your customers. It is general guidance, not legal advice. What are AI scams and deepfake phishing? Phishing is when a criminal pretends to be someone you trust (your bank, a supplier, your boss) to get money, passwords or one-time codes (OTPs). Deepfakes are fake audio, video or images...

In today’s digital age, a website is often the cornerstone of a business or personal brand. It’s where you connect with your audience, showcase your products or services, and build your online presence. But what happens if all that hard work suddenly disappears? This is where the critical importance of backups in web hosting comes into play. Think of backups as your digital safety net, ensuring that even in the face of unforeseen circumstances, your website can be restored to its former glory. Why are backups so crucial? Let’s delve into the various reasons why investing in a robust backup strategy is non-negotiable for any website owner. Data Loss Protection The most obvious and fundamental reason for backups is data loss protection. Imagine spending weeks, months, or even years meticulously crafting content, designing layouts, and building a user-friendly interface, only for it to vanish in an instant. This could be due to a server crash, a malicious hack, accidental deletion, or eve...