-
How to Migrate a Hacked WordPress Site Safely
-
WordPress malware removal is difficult. We gave the job to an AI agent
-
A deep dive into building a secure, fast, easy to manage WordPress hosting stack
WordPress is easy to install. But to make it run smoothly, it needs a production-ready WordPress hosting stack around it. A good stack does several jobs at once: It serve pages quickly. It keeps WordPress, plugins, PHP, MariaDB, and the operating system updated. It blocks common attacks without breaking legitimate admin work. It gives customers…
-
Maintaining servers: Why updates must not wait
Recent vulnerabilities in cPanel and the Linux kernel have served as a stark reminder: unpatched servers aren’t just a theoretical risk. Whether you manage one VPS or a fleet of production machines, the question isn’t if but when your services will be affected. What’s at stake — the recent CVEs Over April and May this…
-
Everything a CEO Needs to Know About Securing Their IT Systems (But Probably Doesn’t)
IT needs security direction from leadership The biggest security failures are leadership failures, not technical failures. What you should do Your weakest link is usually people, not the tech What you need to know What you can implement Protect credentials Most security guidelines emphasise the importance of firewalls to protect servers and services from attacks.…
-
What can you do when AI Bots steal your content and hammer your websites?
We’ve noticed a significant increase in bad bots crawling our servers, causing high load and ignoring robots.txt directives. Many of these are AI bots, along with some overly aggressive search engine crawlers. This might not be an issue for larger servers, but for smaller setups, it can easily cripple a website. A few things we’ve…
-
Looney Tunables: ld.so library local privilege escalation (CVE-2023-4911)
Recently, Qualsys discovered a vulnerability (a buffer overflow) in the dynamic loader’s processing of the GLIBC_TUNABLES environment variable. Which can result in an escalation from local user access to root. This has been labeled as CVE-2023-4911 Running package updates on your server will address this.
-
Introducing multi-user access for your RimuHosting account
We’ve heard your requests for a way to allow multiple team members to manage your RimuHosting services without sharing login credentials. Today, we’re excited to introduce the first version of this much-anticipated feature. Why Multi-User Access? Imagine you’re a business owner who initially set up the RimuHosting account. Now, you want to delegate day-to-day operations…
-
Worried about privacy on public meeting apps? Try Big Blue Button
Recently its come to light that Zoom were keeping video footage of meetings in their T&C. The Software Freedom Conservency calls on its members to eschew Zoom and instead use Open Source (and self-hosted) alternatives. If you are a company and want something a little more secure, that works easily with a nice web interface,…
-
Jailkit chroots with SFTP and interactive SSH logins
Linux has privileged users and non-privileged users. Privileged users (like root) have a user id less than 1000 and typically have super abilities like being able to listen on low number ports (like the port 80 and 443 for web servers). Privilege separation is a good thing. It is recommended when running websites that the…