One of the most critical cybersecurity scares ever — tackled by our great team.
On October 21, 2026, the web’s security community went on high alert. Two critical flaws in PHP, the software behind most of the world’s websites including most WordPress sites, were made public under the name “PHP2Shell”. Both were rated 9.2 out of 10 for severity. They let an attacker take control of a website’s server without any password, and attackers had been trying them since October 17, days before a fix even existed. Around the world, security teams went into emergency mode. The NSA’s cybersecurity team urged every organization using PHP to prepare for an emergency update and, if it could not update immediately, to take its systems offline.
We follow the biggest security agencies and act immediately.
Although this vulnerability put roughly 70% of all websites on the internet at risk, we protected our systems and applied the security patch within hours of the threat being announced, without shutting down a single one of our websites. Our web servers install critical security fixes automatically, and the fix was already running on them by 2:30 a.m. Florida time on October 22, before most businesses had opened their inboxes. That same morning our team checked every system by hand and patched the rest, so every server that runs our websites or holds our clients’ orders and documents is protected.
9/10 threat risk resolved!
There was no emergency shutdown. Our websites stayed online through the whole operation, and orders, estimates and payments carried on as usual.
Because attackers were active before the fix existed, a patch alone was not enough for us. We searched our servers for any trace of a break-in (altered files, hidden scripts, unknown programs, unexpected access keys) and found none. Challenge resolved.
Every day, clients trust us with birth certificates, passports, court papers and medical records, and we take our duty to protect that information seriously. PHP2Shell put a huge part of the internet at risk; our servers were patched, checked and found clean. Your documents are safe with us.
We are protected. Our clients are protected.
If you have any questions about how we protect your documents, our team is happy to help by phone, email or live chat.
