Emerging Threats
-
What PHP2Shell Reveals About the Limits of Automated Pentesting
On the morning of October 21, 2026, everyone responsible for infrastructure that runs PHP woke up to the same two questions. Are we exposed? And if someone ...
-
PHP2Shell: Critical PHP RCE Flaws (CVE-2026-109618 & CVE-2026-109619) Explained
UPDATE October 23, 2026, 14:00 UTC PHP has published an informational advisory for a new RCE vulnerability, CVE-2026-115560, two days after the emergency ...
Emerging Threats
-
CVE-2026-88771: Citrix NetScaler Pre-Auth Command Injection Explained
-
CISA AA26-281A: How Chinese Government-Linked Actors Steal Sensitive Data
-
CVE-2026-94127 Explained: F5 BIG-IP APM Heap Overflow Attack
-
How Click2Shell Exploits WordPress Theme Installation for RCE
-
FSB Center 16: How Russian hackers exploit routers via SNMP and Cisco Smart Install
-
Splunk CVE-2026-20253: Unauthenticated Remote Code Execution Vulnerability Explained
-
RoguePlanet: Anatomy of the Nightmare Eclipse Microsoft Defender Zero-Day
-
NGINX Rift: CVE-2026-42945 Critical Heap Buffer Overflow Vulnerability Explained
-
Mini Shai-Hulud: The npm Supply Chain Worm Explained