InSystem WeaknessbyArafat Ashrafi Talha·5h agoPHP2Shell TryHackMe Walkthrough by Arafat Ashrafi TalhaExploit the PHP2Shell runtime CVEs via session.upload_progress for unauthenticated RCE.
Rubyroid Labs·12h agoBlack October hit the tools we all rely on. Here’s what kept our projects safePHP2Shell, compromised LiteLLM releases, and more: the engineering practices that kept every Rubyroid Labs project secure.
Pietro Romano / SecBeret·1d agoARTEX and Friends: Machine-Speed Intrusions Are Real, but the Evidence Is Narrower Than the FramingGoogle’s Mandiant and GTIG report threat actors running open-source agentic pentesting frameworks in live incident-response cases. The…
v3nomTech·1d agoLazarus Group: How a Fake Job Offer Becomes a Kernel-Level RootkitInside Operation Dream Job’s 2026 wave a trojanized PDF reader, a fresh AFD.sys zero-day, FudModule v3.1, and the Troy backdoor
Joe Njenga·1d agoCursor Claude Code Extension Hits 5k Users With an SSH Backdoor (Don't Be Caught Unaware)If you have Cursor installed or use Claude Code, pay attention to this attack and my detailed guide on how to check and fix it if you are…
InTI Mindmap HUB ResearchbyAntonio Formato·2d agoTI Mindmap Hub | Weekly Threat Brief — Issue #41A Tampered Claude Code Extension Backdoors Cursor Users, a DevOps Laptop Becomes a $6.4B Heist, and PHP2Shell and Brotli Enter CISA KEV
Travis Ray Caverhill·2d agoThe Cameras Were Watching. Their Software Was Letting Attackers In.New threat research reveals how criminals exploited surveillance-management software to establish remote access, hide malicious code inside…
Devore McIntosh·2d agoEight. That is the number that travelled this week: eight flaws a Chinese state-linked crew is…The median remediation window — the number of days between when a vulnerability is added and when it is due-has steadily shrunk throughout…
cyber_pix·2d agoOne Forgotten Key, One Poisoned Release: What the LiteLLM Supply-Chain Attack Means for Your…On October 21, 2026, a compromised version of LiteLLM (1.107.0) was published to PyPI and to the project’s official container registries…
Andreas Stamatis, Ph.D., ACSM-EP, FACSM·4d agoYour Team Knows the Plan. Can They Make the Call?What recent cyber crisis exercises reveal about preparing people for consequential decisions.
