CVE-2026-109618 and CVE-2026-109619

Security Blogs

PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports

AndyC 23 October 2026

PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports Pierluigi Paganini October 22, 2026 AWS detected PHP2Shell exploit attempts...

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

AndyC 22 October 2026

Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They're now being “broadly exploited” across the internet.Photo-Illustration: Jobanny Cabrera; Getty...

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

AndyC 22 October 2026

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could...

AI Guardrails Aren’t Stopping Criminal Hackers

AndyC 22 October 2026

Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.Photo-Illustration:...

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

AndyC 22 October 2026

The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.In the month...

She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family

AndyC 21 October 2026

To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark web—never...