Building the AI-native SOC for the 99% of companies who can't justify a $500K stack.
Security advisories

What broke, who is exposed, and how to find it in your logs.

Our analysis of vulnerabilities and supply-chain incidents worth acting on. Each advisory is dated, sourced to the primary record and updated as the facts change.

  • Published

    PHP2Shell: Remote Code Execution in PHP

    PHP2Shell (CVE-2026-109618, CVE-2026-109619) lets attackers run code on PHP web servers without logging in. Fixed versions, hunting guidance and mitigations.

    CVE-2026-109618CVE-2026-109619
  • Published

    Node.js October 2026 Security Releases

    Node.js 22.23.4, 24.22.1 and 26.12.1 fix 10 CVEs, including a Brotli remote code execution bug. Who is exposed, how to find it and what to upgrade.

    CVE-2026-111497CVE-2026-105482CVE-2026-106069CVE-2026-105483
  • Published

    eMudhra Intermediate CA Private Key Compromise

    Eight eMudhra intermediate CA keys can be recovered from public certificates. Who is exposed, what to patch and how to hunt for forged certificates.

    Mozilla Bugzilla 2083449

Found something in our stack? We triage every report within 24 hours.

Report a vulnerability