Zero Spam

The most up-to-date database of spammy, malicious IPs & emails. Get geolocation & associated user details. Protect your site with Zero Spam. #WebsiteSecurity

[Zero Spam @ZeroSpamOrg]

Search Console clicks up two to ten times since Oct 31, with flat impressions? SEOs think it's bots, and Google hasn't explained it.

5 checks to tell real visitors from fake clicks:
https://t.co/ESPciFMAXb

[Zero Spam @ZeroSpamOrg]

Apache has fixed a critical HTTP/2 flaw, CVE-2026-119618, that can let attackers run code on unpatched web servers. Debian and Ubuntu fixes are still pending.

Who is affected and what to do (we update this page daily):
https://t.co/BIqz8OCXZw

[Zero Spam @ZeroSpamOrg]

Google's November 2026 core update can take two weeks. If it does, the first clean week to measure it is Black Friday week.

6 steps, and how to compare fairly:
https://t.co/qerQqK00sj

[Zero Spam @ZeroSpamOrg]

OpenSSH sshole (CVE-2026-123158) update: GreyNoise now sees attackers getting into its exposed Alpine test servers, and one group installing a backdoor.

Who is affected and the fix:
https://t.co/bHy2m9CVLt

[Zero Spam @ZeroSpamOrg]

@alberto_arena @rashidali05 @saadeguilherme @ahmadmayahi @geekovo @StefanFroemken Thanks for including Zero Spam in the list, and for putting the spotlight on PHP projects that keep shipping.

[Zero Spam @ZeroSpamOrg]

OpenAI, Google, Microsoft and Anthropic now back one AI training opt-out in robots.txt. It doesn't block crawling, and with Google it also affects Gemini.

What to set for your site:
https://t.co/cxhD2nd9cX

[Zero Spam @ZeroSpamOrg]

CISA now lists CVE-2026-123158, the OpenSSH "sshole" flaw, as exploited. It can let anyone log in to passwordless accounts on Alpine Linux with SSH.

Who is affected and what to do (we update this page daily):
https://t.co/bHy2m9CVLt

[Zero Spam @ZeroSpamOrg]

DreamHost says attackers took FTP/SFTP passwords through its File Manager for weeks, plus some webmail logins.

6 checks for your site files and email:
https://t.co/pgdHi5sYvm

[Zero Spam @ZeroSpamOrg]

AI hacking agents found a 21.5 MB plaintext credentials file in a site's web root in about five days, for $180 to $360 in AI fees.

6 checks to run on your site this week:
https://t.co/iMtQzL5Ayp

[Zero Spam @ZeroSpamOrg]

Criminal forums now sell five-star reviews, and charge $100 to $200 to make a bad review disappear.

What that means for your business, and 6 steps to protect your reputation:
https://t.co/l42QqF4tV8

[Zero Spam @ZeroSpamOrg]

WordPress CVE-2026-119977 update: installing the fix still runs the old updater, so a vulnerable site is exposed one last time.

Block wp-content/upgrade/ before you update:
https://t.co/fc48dV6b9T

[Zero Spam @ZeroSpamOrg]

Cloudflare now shows which personal AI agents visit your site and lets you allow or block each one.

Before you block them all, some are customers trying to buy. Which setting fits your site:
https://t.co/5vaNPrsojO

[Zero Spam @ZeroSpamOrg]

Google just shut down XCPE: 1.3 million TV boxes rented out as residential proxies. Bots on home connections slip past IP blocks.

What works instead:
https://t.co/ouc0ZQ83gZ

[Zero Spam @ZeroSpamOrg]

Attackers pushed a backdoor through cPGuard's own update channel. Should you turn off automatic updates? We say no: the bad update was caught within 12 hours, and the fix is an update too.

What to change instead:
https://t.co/xtWDOsUZcE

[Zero Spam @ZeroSpamOrg]

CISA now lists CVE-2026-119977, the WordPress core flaw that opens during updates, as exploited. Fixed in 7.1.4 and older branches back to 4.7.

Who is at risk and what to check, updated daily:
https://t.co/fc48dV6IZr

[Zero Spam @ZeroSpamOrg]

Attackers went after AI developer platforms to steal customers' AI API keys, and the keys fed resale sites. Two stolen keys likely ran up over $100k in usage.

Where your site's AI keys live, and 6 steps to lock them down:
https://t.co/q4fhoMHqf0

[Zero Spam @ZeroSpamOrg]

@PHPSiteAudit Agreed, and thanks. The retraction changes who we can say was hit, not the advice: both PHP2Shell CVEs are in CISA's KEV catalog, so updating to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 still comes first.

[Zero Spam @ZeroSpamOrg]

PHP2Shell update: Unit 42 reports a confirmed break-in at a government body in Europe. Within two hours, attackers had password hashes and MFA secrets.

If your server isn't patched yet, here's what to do:
https://t.co/nYj0163jjm

[Zero Spam @ZeroSpamOrg]

Attackers changed a vendor's DNS at its registrar and swapped the script Polymarket loaded. Traders lost about $2.7 million.

6 steps to lock down your own domain:
https://t.co/LoutO6Nk3I

[Zero Spam @ZeroSpamOrg]

WordPress 7.1.4 fixes a bug attackers can use in the few seconds a core update unpacks. Wordfence logged 18,500+ probes in 21 hours.

Check your version and block the staging folder:
https://t.co/mfguHzxWas