0xK1L·1d agoPHP2Shell Explained: The Decades-Old PHP Bugs That Let One Request Take Over a Web ServerBlack October 2026, part 9: PHP itself wasn’t “hacked”. Two critical CVEs in PHP’s core let unauthenticated attackers run code on almost…
Mohan Krishna Reddy·1d agoA Recent Zero Day Vulnerability Experience and how we approached it….Lets get to the technicalities first,
yedidhe·3d agoPatch What’s Actually Being Exploited: Prioritizing With the CISA KEV CatalogDozens of critical CVEs a month, and a team that can’t patch everything at once. The question isn’t “which flaw is most severe?” but “which…
Anthony Bahn·4d agoFragnesia Fixed Kernel Versions: How to Check Each HostFragnesia fixed kernel versions for upstream and Ubuntu, how to check the running kernel on each host, and the module workaround if you…
Kazem Mortazavi·Oct 28Continuous Vulnerability Management: The Gap Between Two Scans Is the Attack WindowLast quarter’s vulnerability scan report was clean. Two weeks later, a critical CVE was published for a service running on one of the…
Kazem Mortazavi·Oct 28Patching Before the CVE: What Fortinet's AI-Found Flaw Release Teaches Network TeamsThis week Fortinet did something few large vendors have done: it shipped fixes for critical and high-severity flaws, but said it will not…
Jas·Oct 24Critical PHP Vulnerabilities Put Palo Alto Networks Firewalls at Risk: What Security Teams Must Do…A firewall is designed to protect an organization’s network, but vulnerabilities in its own management interface can create a serious…
yedidhe·Oct 24Lire un avis de sécurité constructeur sans paniquer : la méthode en 5 questionsCVSS 9.8, « critique », « exploitée »… Un advisory PSIRT ne se lit pas comme un titre de presse. Voici comment évaluer en dix minutes si…
yedidhe·Oct 24How to Read a Vendor Security Advisory Without Panicking: 5 Questions That MatterCVSS 9.8, “critical”, “exploited”: a PSIRT advisory isn’t a headline. Here’s how to tell in ten minutes whether you’re actually exposed.
