What is actually happening across the global web?
Over the past few weeks, global cybersecurity agencies and incident response teams have tracked an aggressive surge in automated botnet activity. Thousands of automated scanning scripts are sweeping IP ranges looking for:
1. Outdated PHP versions (PHP 5.6, 7.0–7.4, and 8.0 whose vendor support ended years ago).
2. Vulnerable CGI configurations and exposed diagnostic scripts.
3. Unpatched plugins and themes in popular CMS engines (WordPress, PrestaShop).
4. Weak administrative credentials and exposed backup archives (.zip, .sql) in public web directories.
These attacks are not targeting specific businesses; they are automated sweeps designed to hijack any poorly maintained server connected to the internet.
Our Status: Everything on CoreDigify is 100% Safe and Operational
We want to give clear, unambiguous reassurance to all CoreDigify hosting and maintenance clients: your websites, e-shops, databases, and e-mail systems are operating in complete safety and stability.
Our platform was architected from day one under the Defense in Depth principle:
1. Fully Isolated Server Environments
We do not use outdated shared hosting setups where one compromised website endangers everyone else on the server. Every client site runs in its own isolated environment (including CloudLinux CageFS isolation) with strict least-privilege resource boundaries.
2. Modern, Maintained PHP Runtimes (8.2 & 8.3)
All managed applications run on modern, maintained PHP 8.2+ runtimes. Insecure legacy wrappers and functions (exec, shell_exec, system) are strictly restricted.
3. Proactive Perimeter WAF Filtering
Our edge layer incorporates intelligent Web Application Firewalls that inspect incoming traffic and drop malicious scans before they ever reach application code.
4. Off-site Daily Backups
Every care tier includes automated daily backups stored in a physically separate data center. Recovery takes minutes, not days.