News feed
Topics
5 items
Brief · Security
Attackers used the PHP2Shell flaws against vulnerable Check Point Security Gateways and deployed a data-wiping program on VMware ESXi hosts, according to BleepingComputer.
Brief · Security
CISA told federal agencies to patch a high-severity Linux kernel privilege escalation bug. Attackers are chaining it with the PHP2Shell flaws in the wild.
Brief · Security
Attackers have exploited the two PHP RCE flaws CVE-2026-109618 and CVE-2026-109619, tracked as PHP2Shell. Servers running PHP remain at risk until patched.
Analysis · Security
How CVE-2026-109618 and CVE-2026-109619 work, why a PHP version check misleads, what the four-day exploitation puzzle means, and how to test your servers.
Brief · Security
PHP released emergency patches for two RCE flaws, PHP2Shell. Amazon says attackers started exploiting them four days before the patch date.