⤷ Title: Auditing PHP2Shell (CVE-2026–109618 & CVE-2026–109619): Pre-Auth RCE Mechanics, SAPI Exposure &…
════════════════════════
𐀪 Author: Andrew Jennings
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec
════════════════════════
𐀪 Author: Andrew Jennings
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:42:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec
Medium
Auditing PHP2Shell (CVE-2026–109618 & CVE-2026–109619): Pre-Auth RCE Mechanics, SAPI Exposure & Zero-Dependency Fleet Hardening
On October 20–21, 2026, two critical unauthenticated Remote Code Execution (RCE) vulnerabilities in the PHP runtime — collectively tracked…
⤷ Title: Check if your password is in a breach, without ever sending your password anywhere
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #passwords #infosec #security
════════════════════════
𐀪 Author: h@shtalk
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #passwords #infosec #security
Medium
Check if your password is in a breach, without ever sending your password anywhere
There’s a service that will tell you whether any given password has turned up in a data breach. Useful. But it raises an obvious, paranoid…
⤷ Title: How I Stopped Getting Stuck on OSCP Active Directory Machines (The 9-Position Framework)
════════════════════════
𐀪 Author: Got Root?
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:58:51 GMT
════════════════════════
⌗ Tags: #active_directory #information_security #infosec #azure_active_directory #oscp
════════════════════════
𐀪 Author: Got Root?
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:58:51 GMT
════════════════════════
⌗ Tags: #active_directory #information_security #infosec #azure_active_directory #oscp
Medium
How I Stopped Getting Stuck on OSCP Active Directory Machines (The 9-Position Framework)
How to turn scattered Active Directory findings into a structured path to Domain Admin.
⤷ Title: Your Microsoft 365 Account Is Worth Hijacking Even If Your Data Isn’t
════════════════════════
𐀪 Author: S6 Tech
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #ransomware #infosec #microsoft #cyber_security_awareness
════════════════════════
𐀪 Author: S6 Tech
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:31:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #ransomware #infosec #microsoft #cyber_security_awareness
Medium
Your Microsoft 365 Account Is Worth Hijacking Even If Your Data Isn’t
Microsoft traced a storefront that resells hijacked Microsoft 365 accounts, licenses, and storage to crews behind over one billion phishing…
⤷ Title: PHP2Shell: What CVE-2026-109618 & CVE-2026-109619 Teach Us About PHP Security
════════════════════════
𐀪 Author: Albert Deutou
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:23:36 GMT
════════════════════════
⌗ Tags: #security #infosec #cybersecurity #php
════════════════════════
𐀪 Author: Albert Deutou
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:23:36 GMT
════════════════════════
⌗ Tags: #security #infosec #cybersecurity #php
Medium
PHP2Shell: What CVE-2026-109618 & CVE-2026-109619 Teach Us About PHP Security
On October 21, 2026, the PHP project released emergency updates for two critical vulnerabilities in the PHP core runtime:
⤷ Title: In Windows environments, misconfigurations in group permissions and access rights often create…
════════════════════════
𐀪 Author: محمد ادريس أحمد الهسي
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:34:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #windows_privilege_esc #privilege_escalation
════════════════════════
𐀪 Author: محمد ادريس أحمد الهسي
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:34:39 GMT
════════════════════════
⌗ Tags: #penetration_testing #windows_privilege_esc #privilege_escalation
Medium
In Windows environments, misconfigurations in group permissions and access rights often create…
This write-up covers how an attacker with access to an account in the DNSAdmins group can leverage the native DNS management features to…
⤷ Title: What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
════════════════════════
𐀪 Author: Irina Zhuravleva
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:58:19 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #qa #software_testing #web_security
Medium
What Can QA Engineers Learn from APT28 Attacks to Strengthen Web Application Security?
Lessons from a real-world cyber espionage campaign and how software testers can turn threat intelligence into practical security testing.
⤷ Title: PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works
════════════════════════
𐀪 Author: Anmol K Sachan
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:00:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve #php #penetration_testing
════════════════════════
𐀪 Author: Anmol K Sachan
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:00:37 GMT
════════════════════════
⌗ Tags: #cybersecurity #cve #php #penetration_testing
Medium
PHP2Shell: CVE-2026-109618 Pre-Auth RCE, I Tested It Locally and Here’s How It Works
TL;DR
⤷ Title: A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
════════════════════════
𐀪 Author: PerfectQA
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:38:59 GMT
════════════════════════
⌗ Tags: #cybersecurity #vulnerability_management #penetration_testing #qa #software_testing
Medium
A VAPT Report Is Not the Finish Line: How to Close Security Findings Properly
A vulnerability scan can produce an impressive dashboard within hours. That dashboard does not tell a development team which issues have…
⤷ Title: Active — HackTheBox Write-Up
════════════════════════
𐀪 Author: Andrei Cornea
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:01:13 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #htb_writeup #ctf_writeup #cybersecurity
════════════════════════
𐀪 Author: Andrei Cornea
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:01:13 GMT
════════════════════════
⌗ Tags: #penetration_testing #active_directory #htb_writeup #ctf_writeup #cybersecurity
Medium
Active — HackTheBox Write-Up
Description
⤷ Title: Try Hack Me: Metasploit: Post-Exploitation Write Up
════════════════════════
𐀪 Author: Jozepjoestar
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 16:17:24 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
════════════════════════
𐀪 Author: Jozepjoestar
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 16:17:24 GMT
════════════════════════
⌗ Tags: #tryhackme_walkthrough #tryhackme
Medium
Try Hack Me: Metasploit: Post-Exploitation Write Up
Meterpreter Flavors and Selection
⤷ Title: THM — Neighbour
════════════════════════
𐀪 Author: Eko Dimas Prasetyo
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:19:57 GMT
════════════════════════
⌗ Tags: #tryhackme
════════════════════════
𐀪 Author: Eko Dimas Prasetyo
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:19:57 GMT
════════════════════════
⌗ Tags: #tryhackme
Medium
THM — Neighbour
Check out our new cloud service, Authentication Anywhere — log in from anywhere you would like! Users can enter their username and…
⤷ Title: 12 Hands-On Malware Analysis Labs to Build Real Cybersecurity Skills
════════════════════════
𐀪 Author: Zalena Ali
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:36:23 GMT
════════════════════════
⌗ Tags: #malware_analysis #cybersecurity #information_security #programming #ethical_hacking
════════════════════════
𐀪 Author: Zalena Ali
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:36:23 GMT
════════════════════════
⌗ Tags: #malware_analysis #cybersecurity #information_security #programming #ethical_hacking
Medium
12 Hands-On Malware Analysis Labs to Build Real Cybersecurity Skills
12 Practical Malware Analysis Labs Every Cybersecurity Beginner Should Try
⤷ Title: Pwned by 007: A Beginner’s Guide to the TryHackMe GoldenEye CTF
════════════════════════
𐀪 Author: David Wairimu
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:32:41 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking
════════════════════════
𐀪 Author: David Wairimu
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:32:41 GMT
════════════════════════
⌗ Tags: #pentesting #ethical_hacking
Medium
Pwned by 007: A Beginner’s Guide to the TryHackMe GoldenEye CTF
If you’re looking to test your enumeration skills, pivot through different services, and tackle a classic Linux kernel privilege…
⤷ Title: Your 2026 Cybersecurity Career Upgrade Starts Here! 13 Powerful IT Courses to Explore
════════════════════════
𐀪 Author: Daywalkernyc
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:02:19 GMT
════════════════════════
⌗ Tags: #terraform #comptia_certifications #security #ethical_hacking #science_fiction
════════════════════════
𐀪 Author: Daywalkernyc
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:02:19 GMT
════════════════════════
⌗ Tags: #terraform #comptia_certifications #security #ethical_hacking #science_fiction
Medium
🔐 Your 2026 Cybersecurity Career Upgrade Starts Here! 🚀 13 Powerful IT Courses to Explore
🔥 What if your next big career opportunity starts with one cybersecurity skill?
⤷ Title: 2026 Tech Career Deal: Master Cloud, Cybersecurity & Networking — Starting at $11/Month!
════════════════════════
𐀪 Author: Adilbaignyc
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:41:04 GMT
════════════════════════
⌗ Tags: #product_management #ethical_hacking #kubernetes #aws #cybersecurity
════════════════════════
𐀪 Author: Adilbaignyc
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 11:41:04 GMT
════════════════════════
⌗ Tags: #product_management #ethical_hacking #kubernetes #aws #cybersecurity
Medium
🚀 2026 Tech Career Deal: Master Cloud, Cybersecurity & Networking — Starting at $11/Month! 🔥
Want to go from Beginner to Pro in IT? 💻
⤷ Title: Hacker Conversations: Corey Thuen and the Evil Bit
════════════════════════
𐀪 Author: Kevin Townsend
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:31:34 +0000
════════════════════════
⌗ Tags: #Hacker Conversations #hacker
════════════════════════
𐀪 Author: Kevin Townsend
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 14:31:34 +0000
════════════════════════
⌗ Tags: #Hacker Conversations #hacker
SecurityWeek
Hacker Conversations: Corey Thuen and the Evil Bit
Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.
⤷ Title: Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
════════════════════════
𐀪 Author: Mike Lennon
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:00:00 +0000
════════════════════════
⌗ Tags: #Cybersecurity Funding #ICS/OT #ICS #OT
════════════════════════
𐀪 Author: Mike Lennon
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 13:00:00 +0000
════════════════════════
⌗ Tags: #Cybersecurity Funding #ICS/OT #ICS #OT
SecurityWeek
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
⤷ Title: Signal Vulnerability Lets Malicious Callers Block Hang-Ups
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:34:31 +0000
════════════════════════
⌗ Tags: #Mobile & Wireless #Vulnerabilities #Signal #vulnerability
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:34:31 +0000
════════════════════════
⌗ Tags: #Mobile & Wireless #Vulnerabilities #Signal #vulnerability
SecurityWeek
Signal Vulnerability Lets Malicious Callers Block Hang-Ups
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
⤷ Title: Tech and Security Companies Respond to PHP2Shell Vulnerabilities
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:20:23 +0000
════════════════════════
⌗ Tags: #Incident Response #Vulnerabilities #Incident response #PHP #PHP2Shell #security product vulnerability #security products
════════════════════════
𐀪 Author: Eduard Kovacs
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 12:20:23 +0000
════════════════════════
⌗ Tags: #Incident Response #Vulnerabilities #Incident response #PHP #PHP2Shell #security product vulnerability #security products
SecurityWeek
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.