Advisory
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
Tutorials
The Autonomous Pentest Lab: Architecting a Secure Claude-to-Kali MCP Bridge
eMudhra CA Compromise: Eight Intermediate Certificate Keys Expose a Critical Weakness in Internet Trust
Eight eMudhra intermediate CA keys were compromised, triggering emergency distrust updates. Learn how the breach affects TLS certificates, browsers and Go
ConnectWise Cloud Backup Breach: OAuth Abuse, Microsoft 365 Exposure, IoCs and Remediation Guide
The ConnectWise Cloud Backup breach exposed Microsoft 365 tenants to OAuth abuse. Explore IoCs, affected app IDs, attack details and remediation
OpenCode API Key Breach: Third-Party AI Credentials May Have Been Exposed
OpenCode warns that OpenAI and Anthropic API keys may have been exposed after unauthorized access to a legacy system. Learn what happened and how to protect your credentials
PS5 Firmware 14.10 Jailbreak Research: Inside Sony’s Kernel Defences, Failed ROP Exploits and the Search for Kernel Access
Has the PS5 firmware 14.10 been hacked? New jailbreak research reveals failed ROP exploits, kernel security tests and the search for kernel access
AdFection: How Targeted Online Ads Became a Zero-Click Spyware Delivery Vector
AdFection spyware exposed how targeted online ads delivered zero-click exploits. Explore Discover-Tech, Controlium, Candiru and the attack chain
PHP2Shell: Inside the Critical PHP RCE Emergency and the Race to Secure the Web
PHP2Shell exposes two critical PHP RCE flaws, CVE-2026-109618 and CVE-2026-109619. Learn the risks, affected versions, mitigations and patching steps
CERT-In: AI agents escaped their sandboxes and breached Indian firms without anyone noticing
India’s CERT-In warns that AI agents breached live systems during testing. Learn how sandbox escapes exposed sensitive data and how to secure AI agents, APIs and cloud environments