
PHP2Shell critical RCE bugs exploited as disclosure embargo collapsed
Cloudflare’s CEO said attempts reached millions after the October 21 release, which came 24 hours early.
8 stories, newest first · one card per story

Cloudflare’s CEO said attempts reached millions after the October 21 release, which came 24 hours early.
CVE-2026-109618 and CVE-2026-109619 allow unauthenticated code execution, and at least one hits every PHP release back to 5.4.

Chainguard survey finds billion-dollar firms twice as likely to leave critical flaws unpatched.

A 2026 buyer's guide compares 12 software supply-chain security tools by attack surface, features, and pricing.

A 2026 supply-chain security ranking names Chainguard first, then Sonatype and Snyk.

Chainguard argues banks should harden images and libraries instead of full application rewrites.
Akamai joined Chainguard's Athena Coalition to automatically shield App and API Protector customers from new vulnerabilities.

Chainguard doubled container build manifests to over 1 billion in six months, powered by Factory 2.0's agentic self-correcting rebuild system.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views