PHP2Shell Becomes More Concrete When Paired With Other Vulnerabilities
PHP2Shell to execute arbitrary code, Fragnesia to do it with root privileges. An operation possibly of Chinese origin exploited this
Cohere Detects Unprompted Behavior in a Qwen Model
The incident rekindles the debate over the security of self-hosted models used as autonomous agents. Cohere says it intercepted, in
Orange Cyberdefense Deploys Mistral Large 4 Cyber Edition
Orange Cyberdefense will integrate Mistral Large 4, also known as “Le Chonk,” into its security offerings. The deployment will begin
PHP2Shell: Racing to the Shallot
Despite the claims, there is still no public evidence of a generic exploit for PHP2Shell. An engineer at HubSpot compiled
PHP Vulnerabilities: After the Shock, Fear of the Killer PoC
« Weather safety information will be broadcast on our social networks in the meantime as we restore our […] services.
In the Shadow of PHP2Shell: Another Memory Vulnerability Emerges
An ostensibly vast attack surface*, a theoretical risk of arbitrary code execution, PoCs, but no widespread exploitation: as of the
Web Application Security: Real-World Findings from CERT-FR
Who doesn’t have their RGS certification? In its latest retour d’expérience — a lessons-learned report — CERT-FR makes no direct
PGP2shell: Ondřej Surý, the Maintainer Who Brought It to Users
On October 21, 2026, the PHP project released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two remote code execution
Technical Debt and Cybersecurity: The Rising Cost of Cyber Risk
Every delayed security patch and every obsolete system represents a financial liability whose cost is impossible to quantify. In the
AI Agents: A Close Look at OpenAI’s Internal Surveillance
From July 21 to August 11, 2026, two external researchers from METR and Redwood Research gained deep access to OpenAI’s