#php
2 posts
#security-event (8)#abliteration (7)#red-teaming (6)#vulnerability-analysis (6)#open-models (5)#tutorial (5)#model-selection (5)#agent-security (5)#tools (4)#supply-chain (3)#php (2)#ransomware (1)#llm-infra (1)#ai-agents (1)#ai-red-teaming (1)#disclosure-policy (1)#triage (1)#attack-surface (1)#data-report (1)#threat-intel (1)#inference (1)#llama.cpp (1)#policy (1)#open-weights (1)#rce (1)#announcement (1)#deepseek (1)#benchmarks (1)#tiers (1)#model-safety (1)#primer (1)
PHP2Shell day 3: the exploitation curve, the embargo leak, and a second supply-chain shock
Cloudflare's numbers show exploitation starting before disclosure. WatchTowr confirms live attempts. Plus the eMudhra CA key fiasco in the same 48-hour window. What ops and red teams should do now.
PHP2Shell: pre-auth RCE in core PHP, found by AI agents
CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers execute code on stock PHP 8.2 through 8.5, before any application code runs. Patch matrix, interim mitigations, and how to run the same AI-assisted patch triage Wiz used.