🌟 We're celebrating the relaunch of our website! 🌟 Explore our wide range of services in Web Design, Web Development, SEO, GDPR & Legal, and IT Security. Let's enhance your online presence together! Visit us at sphinx-flashdesign.de/en?twi… #webdesign #webdevelopment #SEO #GDPR #ITSecurity

A lot of WP sites will crash within the next few days. Why? WP updated its core. WPRocket caused an error because of this. The cache is hiding it. A lot of WP sites recently are damaged but no one sees it, until they send a POST or GET request to it.

WTH???? Your Manus Pro subscription has been canceled Dear Andreas Lang, The following subscription for Andreas Lang has been canceled: Subscription: Manus Pro This is unavoidable as part of Manus's transition to independent operations and to comply with regulatory requirements in specific jurisdictions. You can backup up your account now and restore it and resubscribe after Manus resumes independent operations. We know this causes disruption, and we'll support you through every step of the process. You can continue using the related membership benefits at no charge during the data backup period. No payment is required until after 2026-08-23.

CVE-2026-15459: WPMU DEV Dashboard <=5.0.0 auth bypass leads to RCE. CVSS 8.1, actively exploited (3,419 attacks in 24h). Patch: 5.0.1. Update now. #infosec #WordPress #websecurity Security researcher Austin Ginder (founder of Anchor Hosting) reported a serious vulnerability in the WPMU DEV Dashboard plugin to the security firm Wordfence. The same day, the vendor WPMU DEV released a patch with version 5.0.1. On 6 August 2026 the vulnerability was officially registered as CVE-2026-15459 in the National Vulnerability Database (NVD) of the US-based NIST and rated with a CVSS score of 8.1 (High). This is a so-called authentication bypass vulnerability – meaning an attacker can completely circumvent the login check and perform actions that should really be reserved for a logged-in administrator. The most dangerous scenario: attackers can install and activate any plugin from a web address they control. Since such a "plugin" can contain arbitrary PHP code, this leads directly to Remote Code Execution (RCE) – the execution of external malicious code on your web server. What's particularly alarming: the flaw is already being actively exploited on a large scale. Within just 24 hours of disclosure, Wordfence blocked 3,419 attacks. The security provider Patchstack classified the vulnerability as "Known to be Exploited" (KEV) – that is, demonstrably already exploited. Details: shieldgaps.com/en/news/wpmu-…

On 23 July 2026, the security researcher “daroo” reported a critical vulnerability in the Kadence WooCommerce Email Designer plugin through the bug bounty programme of the security firm Patchstack. This plugin is used by WooCommerce operators to customise the appearance of their shop's automated emails – such as order confirmations or shipping notifications. It is developed by Nexcess (StellarWP/Liquid Web). The vulnerability was officially published as CVE-2026-28005 on 6 August 2026 and added to the NIST National Vulnerability Database (NVD) as well as at MITRE. It is what is known as a privilege escalation – an unauthorised elevation of rights. What makes it particularly dangerous: it works without any authentication whatsoever. An attacker needs neither a user account nor any prior knowledge of your system. The good news up front: the vendor reacted quickly. As early as 28/29 July 2026 – that is, before the CVE was publicly announced – version 1.5.19.1 was released with the terse changelog entry “Stricter checks in the email preview”. The update is available and must be applied urgently. CVE-2026-28005: unauth privilege escalation in Kadence WooCommerce Email Designer. CVSS 9.8, missing auth (CWE-862) in email preview. Affects <=1.5.19, patched in 1.5.19.1. Update now. #infosec #WordPress

The Russian APT group Laundry Bear – also known as Void Blizzard or TA488 – has been running a broad-based attack campaign against Microsoft Exchange Servers since late July 2026. (APT stands for "Advanced Persistent Threat", meaning a professional, usually state-backed attacker aiming for long-term, undetected access.) In these attacks, the perpetrators exploit the security vulnerability CVE-2026-42897, a so-called cross-site scripting flaw (XSS – a vulnerability that allows foreign program code to be executed in the victim's browser) in Outlook Web Access (OWA). The vulnerability has a CVSS score of 8.1 and is therefore classed as highly dangerous. Through the vulnerability, the attackers plant a highly complex backdoor called OWAReaper. A backdoor is a hidden entry point that lets attackers access a system permanently and undetected. OWAReaper steals credentials and OAuth tokens (digital access keys that replace re-entering a password) and establishes persistent access that remains in place even after password changes and a complete reinstallation. CVE-2026-42897 (CVSS 8.1): XSS in Exchange OWA, actively exploited by Laundry Bear. Half-click via CSS @import drops OWAReaper backdoor, survives pw resets & reinstall. Patched June 2026. #infosec #websecurity Details:

We produce results like that: SEO Wall! I love it.

Shai-Hulud worm hits npm: 'keyv' + 444 pkgs, 2,236 malicious versions, 2B installs/mo. Self-propagating install script steals AWS/GitHub/npm/K8s creds. Purge & rotate now. #infosec #supplychain #npm Details:

Critical flaw in the FormGent WordPress plugin (CVE-2026-3141, CVSS 9.1): unauthenticated attackers can delete arbitrary files incl. wp-config.php, leading to full site takeover. Versions ≤1.9.2 affected. Update now. A single unauthorised request from the internet can be enough to take over a WordPress website completely – with no login, no password, and without any staff member having to click on anything. That is precisely what a critical vulnerability in the WordPress plugin FormGent, an AI-powered form builder, makes possible. The flaw, identified as CVE-2026-3141, carries a CVSS score of 9.1 out of 10 and allows attackers to delete arbitrary files on the server – in the worst case the central configuration file wp-config.php. If this is removed, WordPress believes it has been freshly installed, and an attacker can link the site to their own database and make themselves an administrator. If you are running FormGent in a version up to and including 1.9.2, you should act now. A security update is already available. We explain exactly what happened, how to check whether your site is affected, and what specific steps you need to take. #WordPress #CyberSecurity shieldgaps.com/en/news/formg…

🚨 Critical unauthenticated SQL injection in the WordPress plugin Super Store Finder (≤7.8). CVE-2026-12965, CVSS 9.1 — attackers can dump your entire database. No official fix yet. Check & disable now. Anyone embedding a store or dealer map on their WordPress website via the "Super Store Finder" plugin currently has a serious problem: All versions up to and including 7.8 contain a critical security vulnerability that allows attackers to read your website's entire database without any authentication whatsoever – including usernames, email addresses, hashed passwords and customer data. The vulnerability carries the identifier CVE-2026-12965 and has been rated with a CVSS score of 9.1 out of 10. And worst of all: there is no official patch from the vendor so far. shieldgaps.com/en/news/cve-2… #WordPress #Cybersecurity

Reports of sexual abuse, health data, private messages: now in criminal hands. Data people entrusted to a safe space. Germany's support network BeNe, hacked via a WordPress core flaw. Not targeted: a bot. WPShell Affected: WP 6.9.0-6.9.4, 7.0.0/7.0.1. Update to 7.0.2 or 6.9.5 now.

What a beautiful day! Welcome back! Claude Fable 5 is back online. Anthropic got the green light to roll it back out starting today, after the US government lifted the export controls that froze it. Think tomorrow we can use it again. The 4.8 Opus version was horrible in the meantime.

Tough day: Waking up, wanted to continue my projects... "Claude Fabel 5 is currently unavailable" WTF? "The US government suspended Fable 5 & Mythos 5" offline for all users right now. Fable 5 + GPT-5.5 were the perfect pairing for my projects: two tools, complementary strengths. The US government just pulled Fable, citing that GPT-5.5 already does the same thing. So one stays, one goes. Hope to see it again soon. Damn! #Anthropic #Fable

Two days in Amsterdam with Chris Do & Ron Simpson. Fireside chat on micro influencers, young entrepreneurs asking real questions, honest answers. Also learned: €2.65/L gas, bikes everywhere, average-speed zone got me. Letter incoming. What a city. #chrisdo #thefutur #amsterdam #ronsimpson

A doctor diagnoses correctly 82% of the time. AI hits 95%. That 13% gap? It's your mother's cancer caught too late. Your child's condition missed. But sure, let's wait until AI is "perfect" while humans keep making mistakes we've normalized for centuries. Roy Jakobs (Philips CEO) at Davos asked the real question: "Are we being fair to AI?" We're not. We've built a system where: → Human error = "understandable" → AI error = "unacceptable" Meanwhile, patients die in that 13% gap. The uncomfortable truth: Your bias against AI might cost someone you love their life.

While everyone else is winding down, we’re building the foundation for what’s next. What’s your #1 priority for this last week of the year? Drop it in the comments! 👇

"Nobody needs Google anymore!" A client told me this today. He'd spent months feeding ChatGPT docs about his business. The AI "confirmed" it would share this with everyone. We tested it. Searched his products on ChatGPT, Claude, and Gemini. Result: Nothing. Only competitors showed up. Here's the truth: Your chat history stays in YOUR account. You're not training a public model. You're filling your personal context. "Google is dead" makes great clickbait. It's also factually wrong. Where does AI pull its data? From what Google (or Bing) has indexed. Want to be found by AI search? You need solid SEO first. Google isn't the enemy. Google is the source. #ChatGPT52 #Claude #Gemini #AI #seo

The Christmas Tree of Memories 🎄 To everyone who will miss someone this Christmas. An empty chair at the table. A voice that's missing. A person who lives on in our hearts. Christmas reminds us how much we miss them – our parents, grandparents, partners, children, friends. The people who shaped our lives. For them, we created the Christmas Tree of Memories. Create an ornament with a photo and your personal words. Give your memories a place. And let us remember together those who will forever remain in our hearts. I have hung an ornament for my wife Tine and for my grandmother. They are with me – especially at Christmas. ✨ At the end of the year, all ornaments will drift from the Christmas tree up to the sky – and continue to shine as stars for us. 🕯️ Because love never ends. #remembering #missingwife edolences.com/heavenly-xmas-…

New campaign for Marylin Roper – California vibes meets urban edge. Two looks. Two settings. One story. The Viper Room in L.A. Desert roads with a VW bus. Plot twist: No photographer. No models. No flights. No retouching. 100% AI-generated. Need pro visuals without the five-figure budget? DM me.

Made it for a very special customer of mine: Roberto Mantovani of ashunas-barf-shop.com. facebook.com/reel/1159499996…