Posts tagged with Security on the WebPixie Blog.https://webpixie.io/blog/en-gbhttps://webpixie.io/blog/post/php2shell-how-to-check-patchedhttps://webpixie.io/blog/post/php2shell-how-to-check-patchedPHP2Shell is a pair of critical PHP bugs, CVE-2026-109618 and CVE-2026-109619, that allow unauthenticated remote code execution. What they are, how they work, which versions fix them, and how to verify your patch actually landed.Wed, 21 Oct 2026 23:28:00 GMTSecurityMatt Scotthttps://webpixie.io/blog/post/new-gtld-list-lookalike-domainshttps://webpixie.io/blog/post/new-gtld-list-lookalike-domainsThe 2026 new gTLD list includes strings like .login, .verified, .official and .auth. None can host a lookalike domain yet. What the list shows, what .help already looks like, and what a brand owner can do now versus at launch.Tue, 20 Oct 2026 20:30:00 GMTDomainSecurityMatt Scotthttps://webpixie.io/blog/post/security-headers-checklist-2026https://webpixie.io/blog/post/security-headers-checklist-2026Six headers cover most of the real risk, and the free scanner every checklist points you to recently lost its API. Here is what actually matters, what to skip, and how to verify it without depending on a one-off manual scan.Tue, 25 Aug 2026 12:10:00 GMTSecurityMonitoringMatt Scott