Email Marketing Newsletter: https://xitter.cf/t.co/sQcFR4FQJL | WordPress & WooCommerce Newsletter: https://xitter.cf/t.co/J4X2IYwJAn | Technical SEO Geek & ❤️ ☕
Bangor, Northern Ireland
Joined May 2010
- Tweets25.9K
- Following548
- Followers2.3K
- Likes27.7K
Simon Harper ☕💻 retweeted
Remember the Plague Inc game? Why not track vulnerabilities the same way? Enjoy 😅
vulnocalypse.com/
Simon Harper ☕💻 retweeted
Getting ready to deliver our totally revamped One-Person AI Agency workshop next week.
Next Weds I need to switch the current sales page (davefoy.com/ai-agency/) back to a "register your interest" page.
Closing a launch sales page used to be a nervy job
In WP I'd build the "register interest" page, manually swap the URL slugs over at the right moment, then hunt round the site for every little mention of the workshop – the home page, the training page, the share image – and hope I hadn't missed one.
This time it's all ready days ahead. My site is now in Git, and Kit, my AI web developer (rhyming not intentional), has built both versions on a staging copy. So, every page across the site that needs to change next week has already been previewed and approved. The checkout closes itself on schedule, and on the morning it's one switch.
Same job. Zero stress. 🙌
Simon Harper ☕💻 retweeted
Simon Harper ☕💻 retweeted
Two weeks after launching the WordPress MCP Adapter as a canonical plugin on WordPress .org, the AI Team has been given the green light to make MCP a default part of WordPress.
🔗 therepository.email/wordpres…
Simon Harper ☕💻 retweeted
Claude Duet uses Shop Pay.
Your agent can too → shop.dev
Simon Harper ☕💻 retweeted
We’re working with Anthropic to help you run your businesses inside Claude Duet.
• Make purchases with @link
• Issue refunds and understand business trends with the Stripe MCP
Simon Harper ☕💻 retweeted
Claude Security now keeps up with your code as it changes.
Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.
In public beta on Claude Enterprise.
Simon Harper ☕💻 retweeted
Never deleting this app.
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol
xitter.cf/JustLingonberry/status…
you're a real dev for sure!
Simon Harper ☕💻 retweeted
Until now, any layout experiments I'd do on a live site, would live inside an un-indexed draft page.
In Delta, these mid-flight ideas go to the Sketchbook. A safe environment to draft layout ideas without messing with your site's pages.
Collaborate with your agent on thetchbook and organize your material in boards. Share your explorations with colleagues or Clients. It just works.
Simon Harper ☕💻 retweeted
✅ PHP security update completed across xCloud.
Official PHP patches are now applied on all managed servers, NGINX and OpenLiteSpeed. Our earlier mitigation kept servers protected during the rollout.
No action needed. 🛡️
xcloud.host/php2shell-vulner…
Simon Harper ☕💻 retweeted
Long day for anyone running PHP sites.
After today's PHP security advisory, a lot of people told us they used Novamira to check the integrity of their WordPress sites. With full access, an AI agent can go through files and the database, not just what the dashboard shows.
So we're releasing free skills that walk AI agents through that check. @novamira_ai also now tells the agent when a site runs an affected PHP version.
Simon Harper ☕💻 retweeted
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Simon Harper ☕💻 retweeted
Leaving this here, PHP 8.5.12 security patch is incomplete. ( needs further validation )
Readers added context they thought people might want to know
The PHP 8.5.12 release fixes the two specific CVEs (via state/bailout changes) detailed in official advisories; referenced "surviving paths" (e.g. var_destroy UAF) are separate pre-existing unserialize issues unrelated to this patch.
php.net/archive/2026.p…
github.com/php/php-src/se…
github.com/php/php-src/se…
github.com/dinosn/php-8.5…
Simon Harper ☕💻 retweeted
Days like today, it pays to have a team that cares for your sites like our own.
We’re rolling out PHP patches and mitigating risks.
No action needed from customers.
Rocket.net sites also benefit from @Cloudflare Enterprise protections:
blog.cloudflare.com/php-vuln…
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
A huge thank you to the Laravel team for everything they've done (and are still doing) in response to the critical PHP security advisory. We took preventative measures yesterday and I was very happy to receive a "we are handling it" email from them. Well done to all involved.
Simon Harper ☕💻 retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
Simon Harper ☕💻 retweeted
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35.
PHP 8.1 and below are NOT patched: patchstack.com/articles/php-…
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
Simon Harper ☕💻 retweeted
Kudos to @kinsta (already applying patches), @xCloud_host, and @RocketDotNet, who have server-level mitigations in place, sit behind CF Enterprise, and use those protections.
Good luck to everyone. 😬
