exploited in the wild

PHP2Shell Added to CISA KEV: CVE-2026-109618 and 109619 Due Oct 29

PHP2Shell Just Landed on CISA KEV, and the Deadline Is Thursday

Cybersecsloth Editorial2 weeks ago04 mins

Both PHP2Shell CVEs are now in CISA KEV with a three-day fix-by date and forensic triage flagged. Triage first, then patch, then restart every worker.

Read Full News

PHP2Shell Exploited in the Wild: Confirmed RCE on PHP 8.4.26

PHP2Shell Is No Longer a Theory: Honeypots Just Caught Real Shells

Cybersecsloth Editorial2 weeks ago07 mins

35 shells on honeypots, a bitcoin CTF cracked in under four hours, and a reported campaign sorting 216 unpatched hosts. PHP2Shell is live. Patch, restart, hunt.

Read Full News

LXD and MicroCloud CVSS 10: Your Public Certificate Is Now a Password (CVE-2026-112816)

Two Senators Asked Meta Who Watches the Footage From Its Glasses. Answers Due by Thanksgiving

FBI Pins Binance’s $6.43B Theft on TraderTraitor, and the Private Keys Were Never the Problem

Polymarket’s Performance Monitor Became a Wallet Drainer, and the CSP Waved It Through

Hunting the Cursor Marketplace Claude Code Backdoor: svc-telemetry, .smt and a Reverse Tunnel

CVE-2026-98432: A 2015 IPv4 TCP Bug Got a Remote Root Exploit, and Go Turned MPTCP On for You

Cisco ASA and FTD SSL VPN Can Be Remotely Rebooted, and CISA Put the DoS on KEV

GitLab’s CI Regex Compiler Is a CVSS 10.0 RCE, and CISA Just Put It on KEV

Fragnesia Is on KEV, and It Is the Root Half of the PHP2Shell Chain

A CVSS 2.7 ESX Logging Bug Just Landed on CISA KEV Because Spies Used It as a Zero-Day

PHP2Shell Just Landed on CISA KEV, and the Deadline Is Thursday

PHP2Shell Is No Longer a Theory: Honeypots Just Caught Real Shells