Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Vasilek Backdoor Hidden in VMware Tools: Defending Healthcare VMs After the Partisan Zmiy Intrusion
Why this matters to defenders Russian cybersecurity firm Solar attributes a nearly two-year intrusion inside a Russian healthcare organizati...
php2shell (CVE-2026-109618 / CVE-2026-109619): Defending Against Critical Unauthenticated PHP Remote Code Execution
Introduction The PHP security team has confirmed two critical vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — both rated CVSSv4.0 9....
CVE-2026-96652 'Plex2Shell': CISA KEV Order — Detecting and Remediating the Plex Media Server SSRF Vulnerability
CISA has ordered federal agencies to remediate four newly added vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog — headl...
Splunk Warns: Agentic AI Adoption Is Outpacing Security Oversight — A Defender's Governance and Monitoring Playbook
Splunk Warns: Agentic AI Adoption Is Outpacing Security Oversight — A Defender's Governance and Monitoring Playbook Introduction New researc...
OpenCode RCE Silently Patched: How to Verify Your Exposure and Harden AI Coding Agent Deployments
Introduction Security researchers at Pillar Security have warned that OpenCode — the open-source, terminal-based AI coding agent — quietly p...
PHP2Shell Alert: PHP Out-of-Cycle Release Patches Two Critical CVSS 9.2 Code Execution Flaws — Patch and Detection Guide
PHP2Shell: Two Critical PHP Code Execution Flaws Demand Emergency Patching On October 21, 2026, the PHP project shipped an out-of-cycle secu...
Microsoft's Dynamic Permissions for AI Agents: A Defender's Guide to Detecting and Containing Rogue Agentic AI
AI Agents Are the New Insider Threat — and Microsoft Just Said the Quiet Part Out Loud Microsoft's latest guidance makes official what many ...
CVE-2026-114119: Hardcoded MSSQL Sysadmin Password in Bp Premier — Detection and Remediation Guide for Healthcare Defenders
A Critical, Trivially Exploitable Flaw in Medical Practice Software NVD has published CVE-2026-114119, a CVSS 9.8 (Critical), network-exploi...
CVE-2026-113744: Tenda AC19 httpd Stack Overflow (CVSS 10) — Detection and Remediation Guide
Introduction The NVD has published CVE-2026-113744, a CVSS 10.0 (CRITICAL) stack-based buffer overflow in the httpd web management service o...