⤷ Title: php2shell and Node Brotli RCE: the version string lies
════════════════════════
𐀪 Author: Indra Gusti Prasetya
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 00:00:33 GMT
════════════════════════
⌗ Tags: #rce #security #php
════════════════════════
𐀪 Author: Indra Gusti Prasetya
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 00:00:33 GMT
════════════════════════
⌗ Tags: #rce #security #php
Medium
php2shell and Node Brotli RCE: the version string lies
Probe for Brotli error -17 and read the distro changelog: php2shell patches land as 8.3.6–0ubuntu0.24.04.13, and Bun’s newest tag is…
⤷ Title: Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys
════════════════════════
𐀪 Author: Wade Wells
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 20:09:12 +0000
════════════════════════
⌗ Tags: #Detection #Engineering #security #MITRE ATT&CK #threats #Atomic Red Team
════════════════════════
𐀪 Author: Wade Wells
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 20:09:12 +0000
════════════════════════
⌗ Tags: #Detection #Engineering #security #MITRE ATT&CK #threats #Atomic Red Team
Black Hills Information Security
Detection Engineering: Stop Drowning in Alerts and Start Catching Bad Guys
Detection engineering is both a role and an activity. It’s the discipline of building and maintaining the logic that identifies malicious or risky behavior within your organization. It’s where security analysis meets software engineering, turning raw logs…
⤷ Title: What are the Two PHP Bugs (PHP2Shell) - I explained them in detail
════════════════════════
𐀪 Author: Nikhil
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 21:46:01 GMT
════════════════════════
⌗ Tags: #technology #hacking #security #php #ai
════════════════════════
𐀪 Author: Nikhil
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 21:46:01 GMT
════════════════════════
⌗ Tags: #technology #hacking #security #php #ai
Medium
What are the Two PHP Bugs (PHP2Shell) - I explained them in detail
On October 21, 2026, two software bugs took over my entire feed. Security researchers are calling the pair PHP2Shell, and they carry a…
⤷ Title: Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and…
════════════════════════
𐀪 Author: Jamila Sallem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:58:32 GMT
════════════════════════
⌗ Tags: #web_application_security #tryhackme #security #php2shell #php
════════════════════════
𐀪 Author: Jamila Sallem
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 03:58:32 GMT
════════════════════════
⌗ Tags: #web_application_security #tryhackme #security #php2shell #php
Medium
Why Patching Your Website Isn’t Enough: Understanding PHP2Shell (CVE-2026–109618 and CVE-2026–109619)
I just finished the TryHackMe room on PHP2Shell, and this is what I learned:
⤷ Title: $8,400 for a Message With No Return Address Check: postMessage Origin Validation Bypass to Account…
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:41:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #hacking #security
════════════════════════
𐀪 Author: T4nv1
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 06:41:01 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #cybersecurity #bug_bounty #hacking #security
Medium
$8,400 for a Message With No Return Address Check: postMessage Origin Validation Bypass to Account Takeover
Browsers give web pages a way to talk to each other across different origins when they genuinely need to — an embedded payment widget…
⤷ Title: PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
════════════════════════
𐀪 Author: ExploitDNA
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 07:46:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #php #security #artificial_intelligence #infosec
Medium
PHP2Shell: How Two Critical PHP Vulnerabilities Triggered a Global Security Alert
Part 1: Introduction, Background, and Why PHP2Shell Matters
⤷ Title: PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
════════════════════════
𐀪 Author: xC0D3F4TH3R
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 09:38:52 GMT
════════════════════════
⌗ Tags: #php_developers #cybersecurity #hacking #security #software_development
Medium
PHP2Shell, Explained: How a Server That Runs Out of Memory Can Hand an Attacker the Keys
github : https://github.com/xC0D3F4TH3R/PHP2SHELL-DEFENSIVE-KIT
⤷ Title: 426 Android and iOS Apps Linked to PHP2Shell Backend Risks
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:41:06 +0000
════════════════════════
⌗ Tags: #Security #Android #APPS #Cybersecurity #iOS #NowSecure #PHP #PHP2Shell #Privacy #Vulnerability
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 12:41:06 +0000
════════════════════════
⌗ Tags: #Security #Android #APPS #Cybersecurity #iOS #NowSecure #PHP #PHP2Shell #Privacy #Vulnerability
Hackread
426 Android and iOS Apps Linked to PHP2Shell Backend Risks
426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns about backend security.
⤷ Title: Duplicate. Duplicate. Informative.
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #cybersecurity #careers
════════════════════════
𐀪 Author: Nitin yadav
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #security #hacking #bug_bounty #cybersecurity #careers
Medium
Duplicate. Duplicate. Informative.
Nobody posts the eleven months before the payout. That is the only period that decides whether you make it.
⤷ Title: How security engineers actually assess AI-generated code
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #software_engineering #infosec #cybersecurity #security #vibe_coding
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 11:31:01 GMT
════════════════════════
⌗ Tags: #software_engineering #infosec #cybersecurity #security #vibe_coding
Medium
How security engineers actually assess AI-generated code
A mindset shift for the new era.