Cybersecurity news for companies.
The cybersecurity news that matters: what happened, who it affects and what to do.
· 5 min readPHP2Shell: two critical PHP vulnerabilities and what website owners should do
PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets attackers run code on unpatched PHP servers. Who is affected, fixed versions and what to do today.
· 3 min readRank Math PRO 3.0.123 shipped with malware: check your WordPress site
Some Rank Math PRO 3.0.123 downloads on 15–16 October contained a backdoor. How to tell if your WordPress site is affected and how to recover safely.
· 3 min readDenmark's population register breach: 8.8 million records through a small IT company
Data on 8.8 million people in Denmark was accessed through the login of one small IT company. What to require from yourself and your IT partner.
· 3 min readA cyberattack switched off fridges in French supermarkets: lessons for small businesses
A cyberattack shut down refrigeration in hundreds of French supermarkets. How to protect connected fridges, heating and cameras in a small business.
· 3 min readRecord number of data breaches in Estonia, partly driven by Magento and WordPress flaws
Estonia's data protection regulator received a record 123 breach notifications in Q3 2026. What it means for online shops and what to do now.
· 3 min readBricksforge plugin flaw CVE-2026-85097 is under active attack
Attackers are exploiting CVE-2026-85097 in the Bricksforge WordPress plugin to upload code without logging in. Who is affected and what to do now.
· 3 min readEstonia's defence procurement agency lost almost €60,000 to invoice fraud
Estonia's Centre for Defence Investments lost almost €60,000 to invoice fraud in 2024. How the scheme works and how to check a supplier's new bank details.
· 3 min readEstonia in September: critical WordPress flaws, DDoS attacks and state login outages
RIA's September 2026 overview for business owners: critical WordPress vulnerabilities, DDoS attacks on Estonian sites and repeated state login outages.
· 3 min readFakturownia breach: leaked invoices and bank details are raw material for invoice fraud
Bank details and older invoices may have leaked from the Polish invoicing platform Fakturownia. How to check a bank account change before you pay.
· 3 min readTSC data breach: how a repair firm's website led an attacker to its customer database
Latvian repair firm TSC lost customer data through its website, including some Estonian customers. What it means for a small business and what to do.
· 3 min readCritical WordPress flaw exploited within hours of the 7.1.2 fix
WordPress 7.1.2 fixes a critical vulnerability that attackers began exploiting within hours. Which sites are at risk and what owners should do today.
· 3 min readCyber Resilience Act: software and device makers must now report exploited vulnerabilities
From 11 September 2026, the Cyber Resilience Act requires manufacturers to report exploited vulnerabilities within 24 hours. Who counts and what to do.
· 3 min readPatient data leaked from a dental software supplier: what to ask your own suppliers
Patient data from over 300 Estonian healthcare providers leaked from Innovaatik's dental system. What to ask your software supplier and when to notify AKI.
· 3 min readElementor Pro flaw under attack: sites with file upload forms at risk
A critical Elementor Pro flaw lets attackers upload malicious files through website forms. Who is at risk and what to do if you run 4.2.1 or older.
· 3 min readEstonia in August: fake parking fine texts, a school ransomware attack and outages that were not attacks
RIA's August 2026 overview for business owners: fake Transport Administration fine texts, ransomware at a school, and what to tell your staff now.