PHP security
PHP2Shell explained: PHP security risk and what to do now
Understand PHP2Shell, CVE-2026-109618 and CVE-2026-109619, affected runtimes, fixed releases and the evidence needed to protect a UK business website.
Read articleCYBERXPERTS SECURITY INSIGHTS
Practical guidance for safer business decisions.
Explore 46 detailed guides and articles for UK businesses: hacked website recovery, PHP security, incident response and stronger everyday controls.
Explore the library
START WITH THE RECOVERY GUIDE
Hacked Website Recovery UK: What to Do After a Defacement, Redirect or Malware Warning
A step-by-step guide for UK businesses dealing with defaced websites, suspicious redirects, injected scripts, SEO spam pages or browser malware warnings.
Read the recovery guide
THE PRACTICAL SECURITY LIBRARY
46 guides and articles. Clear next steps.
20 new website recovery articles, 7 PHP security runbooks and the original 19 guides.
46 of 46 guides and articles
PHP security
Patch PHP2Shell on Ubuntu or Debian with PHP-FPM
Patch PHP2Shell on Ubuntu or Debian using the correct vendor packages, then restart PHP-FPM, verify running workers and test your website safely.
Read article
PHP security
PHP2Shell on Hostinger: check your hosting protection
Check Hostinger PHP2Shell coverage for managed hosting and VPS, understand backports and gather reliable evidence without exposing phpinfo publicly.
Read article
PHP security
PHP2Shell patching for cPanel and Plesk servers
Plan PHP2Shell patching on cPanel and Plesk: check every PHP handler, use vendor update channels, replace workers and verify all affected domains.
Read article
PHP security
Verify a PHP security patch in the running web workers
Verify a PHP security patch beyond php -v: connect vendor package evidence, web handlers, running workers and every server or container replica.
Read article
PHP security
PHP2Shell incident response after an unpatched server
Respond to possible PHP2Shell compromise: preserve evidence, contain exposure, verify the runtime fix and rebuild a trusted website before reopening.
Read article
PHP security
PHP2Shell emergency patching checklist for businesses
Use a practical PHP2Shell business checklist to assign owners, patch every PHP service, verify the fix and manage downtime, recovery and exceptions.
Read article
Website recovery
WordPress Redirecting to Spam? A Safe Recovery Plan
Fix a hacked WordPress site redirecting to spam. Find hidden redirects, contain the damage, remove the access route and verify a clean recovery.
Read article
Website recovery
Remove a Google Unsafe Website Warning After a Hack
Recover a hacked website with a Google security warning. Separate cleanup, security review and search recovery, with checks before requesting review.
Read article
Website recovery
WordPress Malware Keeps Coming Back: Find the Cause
Stop recurring WordPress malware by separating persistence, stolen access and reinfection. Build an evidence-led cleanup and monitoring plan for your site.
Read article
Website recovery
Hacked Website Recovery Without a Clean Backup
Recover a hacked website without a clean backup. Assess what can be salvaged, rebuild trusted code, protect business data and verify the restored site.
Read article
Website recovery
Restore Hacked WordPress from a Backup Safely
Restore hacked WordPress safely: choose a trustworthy recovery point, repair the access route, reconcile recent data and test before reopening your site.
Read article
Website recovery
WooCommerce Hacked Checkout: Contain, Investigate, Recover
Respond to a hacked WooCommerce checkout. Contain payment risk, investigate changed scripts and settings, reconcile orders and verify a safe reopening.
Read article
Website recovery
WordPress Admin Hacked and Locked Out? Recover Access Safely
Recover a hacked WordPress admin account safely. Secure recovery email, prove ownership, review privileged access and verify the website after login returns.
Read article
Website recovery
Japanese Keyword Hack: WordPress Cleanup and Search Recovery
Clean up a Japanese keyword hack in WordPress. Remove injected pages, review Search Console ownership, repair access and restore a clean URL inventory.
Read article
Website recovery
Website Defacement Recovery for UK Businesses
Recover a defaced business website with a clear incident plan: preserve evidence, contain changes, restore trusted pages and communicate accurately.
Read article
Website recovery
PHP Webshell Removal: Recover the Website and Close Access
Respond to a PHP webshell without stopping at file deletion. Preserve evidence, investigate access and persistence, rebuild trust and verify recovery.
Read article
Website recovery
cPanel Hacked Website Recovery: A Practical UK Business Plan
Recover a hacked website on cPanel with a practical plan for evidence, account access, clean backups, databases, scheduled tasks and safe relaunch checks.
Read article
Website recovery
Multiple Websites Infected on Shared Hosting: Stop Reinfection
Recover multiple infected websites on shared hosting by mapping account access, isolating each site, removing shared entry routes and testing before relaunch.
Read article
Website recovery
Hacked Website Sending Spam Email? Find and Stop the Source
Stop spam email from a hacked website by distinguishing script abuse, stolen mailbox access and spoofing, then repair the cause and verify legitimate delivery.
Read article
Website recovery
Hacked Website and Customer Data: A UK Business Response Guide
Respond to a hacked website involving customer data with a UK-focused plan for evidence, risk assessment, ICO reporting decisions and clear customer updates.
Read article
Website recovery
Hacked Website Recovery Cost: What UK Businesses Should Budget For
Understand hacked website recovery costs: scope the investigation, estimate downtime, compare cleanup quotes and plan a recovery budget with clear assumptions.
Read article
Website recovery
Malicious JavaScript Injected into Your Website: A Recovery Plan
Investigate malicious JavaScript on your website, remove compromised scripts and tags, assess visitor risk, and verify forms, checkout and browser requests.
Read article
Website recovery
DNS Hijacking Recovery: Restore Your Website and Domain Control
Recover from DNS hijacking by securing registrar access, preserving ownership evidence, restoring verified records and checking website and email dependencies.
Read article
Website recovery
WordPress Hacked Through a Plugin: Patch and Recover Safely
Recover after a WordPress plugin vulnerability: verify affected releases, contain exposure, rebuild trusted files and check for access the attacker left behind.
Read article
Website recovery
Recover Google Visibility After a Website Hack: An SEO Action Plan
Recover search visibility after a website hack by cleaning hacked URLs, checking Search Console, repairing indexing signals and monitoring page recovery.
Read article
Website recovery
Hacked Website Recovery Verification: A Business Handover Checklist
Verify a hacked website recovery with an evidence-based checklist covering access, trusted code, customer workflows, search signals, monitoring and handover.
Read article
Incident Response
Hacked Website Recovery UK: What to Do After a Defacement, Redirect or Malware Warning
A step-by-step guide for UK businesses dealing with defaced websites, suspicious redirects, injected scripts, SEO spam pages or browser malware warnings.
Read guide
Incident Response
Ransomware Response Plan for UK SMEs: Containment, Recovery and Lessons Learned
A practical ransomware response plan for UK SMEs that need to contain damage, preserve evidence, restore safely and reduce future risk.
Read guide
Security Assessment
Vulnerability Assessment Checklist for UK Websites, Applications and Business Systems
Use this checklist to understand what a useful vulnerability assessment should cover before attackers exploit preventable weaknesses.
Read guide
Threat Detection
Threat Detection Guide for UK Businesses: Signals That Matter Before a Breach
Threat detection helps identify suspicious activity before it becomes a full breach. Learn which signals UK businesses should monitor.
Read guide
Email Security
Phishing and Business Email Compromise in the UK: Prevention and Response
Business email compromise can lead to fraud, data exposure and account takeover. Learn the warning signs and response steps.
Read guide
Website Security
WordPress Website Security for UK Businesses: Hardening, Monitoring and Recovery
WordPress powers many UK business websites, but weak plugins, exposed admin areas and poor hosting controls create avoidable risk.
Read guide
Website Security
Web Application Firewall Guide UK: How WAF Protection Helps Stop Website Attacks
A WAF helps reduce malicious traffic, bot abuse and exploit attempts while website vulnerabilities are fixed properly.
Read guide
Endpoint Security
Endpoint Detection and Response for UK SMEs: What EDR Actually Does
EDR helps detect suspicious device behaviour, investigate incidents and contain threats before they spread across the business.
Read guide
Data Security
Data Breach Response for UK Businesses: First Steps, Evidence and Recovery
When customer or business data may be exposed, a structured response helps reduce harm, preserve evidence and guide recovery.
Read guide
Industry Security
Cyber Security for UK Ecommerce Websites: Protecting Payments, Customers and Search Visibility
Ecommerce websites face payment, customer data, bot, fraud and SEO spam risks. Learn how to protect revenue and trust.
Read guide
Cloud Security
Microsoft 365 Security Checklist for UK Businesses
Microsoft 365 is central to many UK businesses. This checklist covers the controls that reduce account takeover and data exposure risk.
Read guide
Incident Response
Cyber Incident Response Retainer UK: Why Preparation Matters Before an Attack
A retainer helps businesses prepare before an attack, reduce confusion and get expert support faster during a cyber incident.
Read guide
Security Awareness
Security Awareness Training UK: Building Safer Habits Without Blaming Staff
Effective awareness training helps staff make safer decisions without blame, fear or generic tick-box learning.
Read guide
Industry Security
Cyber Security for UK Law Firms: Protecting Client Data, Email and Case Files
Law firms hold sensitive client data and financial information, making email, documents and access control critical security priorities.
Read guide
Industry Security
Cyber Security for UK Healthcare Providers: Protecting Patient Data and Availability
Healthcare providers must protect patient data and service availability while managing devices, suppliers and sensitive records.
Read guide
Cloud Security
Cloud Security Misconfigurations UK Businesses Should Fix First
Many cloud breaches come from misconfiguration rather than advanced malware. Learn which weaknesses UK businesses should fix first.
Read guide
Threat Intelligence
Cyber Threat Intelligence for UK SMEs: Turning Threat Information Into Action
Threat intelligence helps SMEs understand relevant attacker behaviour and turn signals into practical security decisions.
Read guide
Recovery Planning
Backup and Disaster Recovery for Ransomware Resilience in UK Businesses
Backups only help if they are protected, tested and available when ransomware or destructive malware hits.
Read guide
Data Security
Data Security Services UK: Protecting Customer, Employee and Business Information
Data security protects sensitive information by controlling who can access it, where it is stored and how it is monitored.
Read guideNo articles match this search. Try a broader term or choose All insights.
TURN GUIDANCE INTO ACTION
Need help with a hacked website or a security concern?
Describe the symptoms and affected systems. Avoid sending passwords, customer data or suspicious files in your initial enquiry.