Zybee Labs Blog
Security, explained for the people who ship.
Practical guides for founders and teams running websites and AI-built apps. What goes wrong, how to check it yourself, and what to fix first.
-
Rank Math PRO 3.0.123 backdoor: how to check your WordPress site
Rank Math PRO 3.0.123 shipped with malware on 15–16 October 2026. Who is affected, why updating to 3.0.124 is not enough, and what to check and clean now.
Read the guide -
PHP2Shell: check and update your PHP version
PHP2Shell (CVE-2026-109618/-109619): check your PHP version in WordPress, cPanel, Plesk or Docker and update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
Read the guide -
Vibe-coded app security checklist: 6 things to check before you launch
Built your app with Lovable, Bolt, Replit or Cursor? Six checks for exposed keys, open Supabase or Firebase data, public files and missing protections, and how to run each one yourself.
Read the guide