Buyer's guide ranks 11 SOC-as-a-service providers
Blackpoint Cyber is left off the roster under the publication's standing editorial policy.
18
- Mentions · 7d3
- Mentions · 30d5
- All mentions6
- First seenAug 26, 2026
- Last mentioned17h ago
Timeline
6 articles · newest firstPHP2Shell exploitation confirmed with working shells on honeypots
Karimi logged 35 shells on October 24 across three PHP 8.4.26 honeypots; CISA had not added the flaws to KEV.
84
PHP2Shell RCE flaws confirmed exploited against PHP 8.4.26
A Perplexity honeypot saw working RCE and an 800 KiB cookie dump on Apache mod_php; a separate unpatched RCE still needs a config workaround.
88
PHP2Shell exploit attempts rise, but experts doubt they succeed
Amazon and others report scans since October 17, while researchers say public PoCs fail on typical PHP setups.
74
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
Microsoft says ClickFix attacks now smuggle VBScript through the browser cache to bypass Windows Run limits.
64
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.
55
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- Microsoftorganization · 2
- Perplexityorganization · 2
- Microsoftvendor · 2
- PHPvendor · 2
- Arctic Wolforganization · 2
- Sophosorganization · 1
- UnderDefenseorganization · 1
- BlueVoyantorganization · 1
- Intrinsecorganization · 1
- Expelvendor · 1
- Amazon Threat Intelligenceorganization · 1
- ReliaQuestorganization · 1
- Cybereasonvendor · 1
- Microsoft Defenderproduct · 1
- GreyMatterproduct · 1
- Proficioorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.