<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Zybee Labs Blog</title><description>Plain-language guides to the security of websites and AI-built web apps.</description><link>https://zybee.ai/</link><language>en</language><item><title>Rank Math PRO 3.0.123 backdoor: how to check your WordPress site</title><link>https://zybee.ai/blog/rank-math-pro-backdoor-check/</link><guid isPermaLink="true">https://zybee.ai/blog/rank-math-pro-backdoor-check/</guid><description>Rank Math PRO 3.0.123 shipped with malware on 15–16 October 2026. Who is affected, why updating to 3.0.124 is not enough, and what to check and clean now.</description><pubDate>Fri, 23 Oct 2026 12:30:00 GMT</pubDate><author>hello@zybee.ai (Steffen Stein)</author></item><item><title>PHP2Shell: check and update your PHP version</title><link>https://zybee.ai/blog/check-update-php-version/</link><guid isPermaLink="true">https://zybee.ai/blog/check-update-php-version/</guid><description>PHP2Shell (CVE-2026-109618/-109619): check your PHP version in WordPress, cPanel, Plesk or Docker and update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35.</description><pubDate>Wed, 21 Oct 2026 14:01:43 GMT</pubDate><author>hello@zybee.ai (Steffen Stein)</author></item><item><title>Vibe-coded app security checklist: 6 things to check before you launch</title><link>https://zybee.ai/blog/vibe-coded-app-security-checklist/</link><guid isPermaLink="true">https://zybee.ai/blog/vibe-coded-app-security-checklist/</guid><description>Built your app with Lovable, Bolt, Replit or Cursor? Six checks for exposed keys, open Supabase or Firebase data, public files and missing protections, and how to run each one yourself.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate><author>hello@zybee.ai (Steffen Stein)</author></item></channel></rss>