GVIP blog looks back at the PHP2shell incident
The oss-security note only links the post and does not describe the incident.
Stories per day · 30 days
1 RSS
4 stories, newest first · one card per story
Stories tagged #log4j
We tested our own WAF with frontier AI models. Here’s what we found
Cloudflare used frontier LLMs as adaptive attackers to test its WAF, logging 1,107 attempts and hardening detections from bypasses.
5
Propagation Model for SSC attacks: Why SBOM (tools) don't tell the whole truth
Study shows open-source SBOM tools only cover structural exposure and vulnerability presence, missing code reachability and taint-path analysis stages.
Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021
Apache Log4j 2 RCE CVE-2021-44228 is actively exploited via crafted JNDI lookups; Palo Alto Unit 42 urges upgrading to Log4j 2.17.1.
4