Mistral Large 4 ships as open weights for coding and cyber
The 1.05T model has 52B active parameters and a 1M context; Mistral's ranking claims are narrower than independent scores.
64
Organization
Cloudflare
- Mentions · 7d11
- Mentions · 30d108
- All mentions204
- First seenAug 12, 2026
- Last mentioned1d ago
Timeline
204 articles · newest firstArkham Binance-hacker page failed to load behind Cloudflare
The captured page is only a Cloudflare 403, so the $5.6 billion theft figure is unverified.
12
PHP2Shell cleanup will lag exploitation; Token Security argues identity limits matter more than CVSS
Censys counted 32.5 million internet-facing PHP services on vulnerable versions a week after patching, and CISA added both flaws to its KEV list on October 26.
30
CISA adds exploited PHP2Shell flaws to its KEV catalog
Unauthenticated HTTP requests can run code on PHP engines dating to PHP 5.4; agencies must fix by October 29, 2026.
88
Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
82
Weekly recap: PHP2Shell scans, Plex2Shell attacks, LiteLLM supply chain
CISA listed four exploited Plex flaws, while a leaked LiteLLM key led to a malicious Python package release.
78
PHP2Shell RCE flaws confirmed exploited against PHP 8.4.26
A Perplexity honeypot saw working RCE and an 800 KiB cookie dump on Apache mod_php; a separate unpatched RCE still needs a config workaround.
88
PHP2Shell flaws allow unauthenticated RCE; wild attacks reported
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; both flaws score CVSS 9.2.
86
Blogger drops Next.js after chasing perfect Lighthouse scores
The author says Next.js 16.1.6 still shipped a client runtime and about 230 KB of unused JavaScript on static pages.
6
PHP2Shell exploited at a European government entity, Unit 42 says
Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.
86
Equity podcast debates PHP flaws, disclosure panic and attack attempts
Cloudflare's CEO is cited as seeing PHP2Shell attack attempts climb into the millions after an embargo broke.
36
PHP2Shell drew millions of exploit attempts; none succeeded, foundation says
Cloudflare saw millions of attempts within hours, while Calif, OpenAI and Wiz say AI helped turn long-known PHP issues into practical exploits.
62
PHP2Shell exploitation surges while most public PHP stays unpatched
Cloudflare's CEO said attempts reached millions within hours of disclosure; Ox still saw 97.5% unpatched on October 23.
86
PHP warns of unlikely code-execution flaw CVE-2026-115560
Disable session upload progress until a routine release; the October 21 PHP2Shell patches do not fix it, and no attacks are reported.
64
PHP shares mitigation for unpatched RCE CVE-2026-115560
Only unusual session-handler setups are affected; admins should keep session.upload_progress.enabled set to 0 until the next release.
68
SANS drops Infocon to green after coordinated PHP patches
No reliable public exploit is known, though firms claim private code and scanners report many attempts.
64
Public PHP2Shell exploit code used in failed Potassium botnet attempts
Sophos found scanning and failed attempts, not a confirmed compromise; PHP fixed the flaws on October 21.
78
PHP2Shell draws millions of attempts; no confirmed RCE yet
Fixes are in PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12, while Censys still counts over 34.4 million vulnerable services.
88
Prince of Persia APT hosts C&C in US for first time since 2016
After a three-month pause, Tonnerre stole more than 1,800 files from one victim within a week of the May 27 restart.
68
PHP2Shell critical RCE bugs exploited as disclosure embargo collapsed
Cloudflare’s CEO said attempts reached millions after the October 21 release, which came 24 hours early.
88
Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
74
Okta and Auth0 are removing trust in eMudhra emSign ECC Root CA – G3
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
74
eMudhra exits certificate business after weak intermediate keys
Eight intermediate keys were trivial values; browsers blocked them, and the firm says nothing was breached.
78
PHP2Shell takes 32 UK government services offline
AWS says the two critical PHP bugs were exploited four days before disclosure; no public-sector compromise is confirmed.
88
PHP2Shell attacks started four days before public disclosure
Fixed builds are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; AWS saw broad exploitation and no full config-only workaround.
88
PHP2Shell flaws drew millions of exploit attempts, some before disclosure
Amazon saw a honeypot hit on October 17, four days before patches, and Cloudflare has since logged millions of attempts.
86
PHP2Shell exploitation began days before the patches
Amazon says probing started October 17; CISA urges PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35.
92
Blog says Cloudflare is rewriting its proxy layer in Rust
The author ties the shift to 2017 Cloudbleed and says a November 18, 2025 outage came from unwrap on bad config.
24
Core PHP PHP2Shell bugs enable unauthenticated RCE, two teams report
Calif, using GPT-5.6 Sol, and Wiz independently found CVE-2026-109618 and CVE-2026-109619 after about two months of private coordination.
90
October 21 fixes cover PHP2Shell, LiteLLM theft, and VPN attacks
Fixed PHP builds are 8.5.12, 8.4.27, 8.3.36, and 8.2.35; LiteLLM 1.107.0 stole secrets, so pin 1.106.2 and rotate them.
86
PHP RCE flaws CVE-2026-109618 and CVE-2026-109619 exploited in the wild
Fixed builds are 8.5.12, 8.4.27, 8.3.36 and 8.2.35; PHP 7.4, 8.0 and 8.1 get emergency source backports only.
90
GPT-5.6 Sol and Gemini 4 Argon found a critical PHP flaw
OpenAI says the models found the issues before attackers, and a GitHub tool checks whether a PHP version is affected.
78
PHP says AI review revived critical bugs first flagged in 2024
Cloudflare saw exploitation attempts Wednesday, while the foundation says Chainguard published the fix before coordinated disclosure.
76
PHP patches PHP2Shell RCE bugs as exploit attempts hit sensors
CVE-2026-109618 and CVE-2026-109619, both CVSS 9.2, are fixed in 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
92
PHP2Shell flaws draw early attacks; emergency PHP updates out
Fixes are in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; both bugs are rated 9.2.
92
Actively exploited PHP bugs allow full server takeover
Fixes are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35; Cloudflare says it already saw exploit traffic.
93
Critical PHP flaws let unauthenticated attackers run code on web servers
CVE-2026-109618 and CVE-2026-109619 score 9.2; only PHP 8.2 and newer get official patches, and Cloudflare reported early attacks.
90
Sites go offline as two critical PHP bugs draw early attacks
Fixes are out only for PHP 8.2 and newer; Cloudflare and watchTowr report emerging attacks dubbed PHP2Shell.
90
eMudhra CA signing keys were so weak anyone could recover them
Eight intermediates from an April 2025 ceremony used keys under 256; browsers blocked them, and about 30,000 customer certificates need replacement.
86
PHP releases emergency patches for critical PHP2Shell RCE bugs
Unauthenticated attackers can run code as the web worker, and Cloudflare says it already saw early exploitation attempts.
92
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-11149783%9.2Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
- CVE-2020-0688100%8.8RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
- CVE-2021-4228777%7.5Privilege Escalation in Microsoft Active Directory Domain Services
- Authenticated RCE in GitLab CE/EE via Double Free in CI/CD Regex Parsing
- Auth bypass in Apache Tomcat JNDIRealm with non-GSSAPI SASL
- CVE-2026-86207<1%7.7Authentication bypass in N-able N-central internal APIs before 2026.3 HF 3
Appears with
- Cloudflarevendor · 88
- OpenAIorganization · 39
- Microsoftorganization · 24
- PHPproduct · 21
- Cloudflare Workersproduct · 21
- PHPvendor · 20
- Microsoftvendor · 19
- Googleorganization · 16
- Wizorganization · 16
- Googlevendor · 14
- TRM Labsorganization · 13
- Health-ISACorganization · 12
- watchTowrorganization · 11
- Appleorganization · 11
- OpenAIvendor · 11
- Mozillaorganization · 10
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.