Practical notes on web application firewalls, monitor mode and database-layer protection.https://dbshieldx.com/en-gbhttps://dbshieldx.com/blog/alert-2026-11-09-wordpress-core-flaw-cve-2026-119977-exploited/https://dbshieldx.com/blog/alert-2026-11-09-wordpress-core-flaw-cve-2026-119977-exploited/An unauthenticated code execution flaw in WordPress core upgrades is under active attack. Here is who is affected and what to do today.Mon, 09 Nov 2026 00:00:00 GMTSecurity alertinfo@dbshieldx.com (DBshieldX research)https://dbshieldx.com/blog/check-the-sql-not-just-the-request/https://dbshieldx.com/blog/check-the-sql-not-just-the-request/Request rules see what arrives at your site. A query check sees what reaches your database. How learning your app's query shapes adds a second line of defence.Mon, 09 Nov 2026 00:00:00 GMTDatabase protectionSQL injectioninfo@dbshieldx.com (Peter Mitala)https://dbshieldx.com/blog/env-and-wp-login-probes/https://dbshieldx.com/blog/env-and-wp-login-probes/Automated scanners ask every website for config files and WordPress login pages, whatever it runs. Why it happens, and the simple steps that make it harmless.Mon, 09 Nov 2026 00:00:00 GMTBots and scannersHardeningnginxinfo@dbshieldx.com (Peter Mitala)https://dbshieldx.com/blog/what-is-waf-monitor-mode/https://dbshieldx.com/blog/what-is-waf-monitor-mode/Monitor mode lets a web application firewall show what it would block without touching real visitors. Why it's the safe first step, and how to know when to block.Mon, 09 Nov 2026 00:00:00 GMTMonitor modeRolloutFalse positivesinfo@dbshieldx.com (Peter Mitala)