Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
PHP2Shell: Emergency PHP Patches Fix Two Critical Pre-Auth RCE Flaws — Detection and Remediation Guide
The PHP project has shipped out-of-band emergency releases — PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 — to remediate two critical code executi...
OpenCode Console Breach Exposes OpenAI, Anthropic, and Google Gemini API Keys — Detection, Key Rotation, and Incident Response Guide
OpenCode Console Breach: What Defenders Need to Do Right Now If your developers use OpenCode Console — the web-based management interface fo...
ConnectWise Supply-Chain Attack: Defending Microsoft 365 Tenants Against Compromised API Secret Abuse
Introduction A supply-chain attack against ConnectWise — one of the most widely deployed MSP/TSP platforms in the managed services ecosystem...
Hitachi Energy MicroSCADA X SYS600 Vulnerabilities (CVE-2026-9852/9853/9854): ICS Detection and Remediation Guide
Hitachi Energy MicroSCADA X SYS600 Vulnerabilities: Detection and Remediation Guide for Energy Sector Defenders CISA has published ICSA-26-2...
php2shell (CVE-2026-109618 / CVE-2026-109619): Defending Against Critical Unauthenticated PHP Remote Code Execution
Introduction The PHP security team has confirmed two critical vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — both rated CVSSv4.0 9....
Splunk Warns: Agentic AI Adoption Is Outpacing Security Oversight — A Defender's Governance and Monitoring Playbook
Splunk Warns: Agentic AI Adoption Is Outpacing Security Oversight — A Defender's Governance and Monitoring Playbook Introduction New researc...
OpenCode RCE Silently Patched: How to Verify Your Exposure and Harden AI Coding Agent Deployments
Introduction Security researchers at Pillar Security have warned that OpenCode — the open-source, terminal-based AI coding agent — quietly p...
PHP2Shell Alert: PHP Out-of-Cycle Release Patches Two Critical CVSS 9.2 Code Execution Flaws — Patch and Detection Guide
PHP2Shell: Two Critical PHP Code Execution Flaws Demand Emergency Patching On October 21, 2026, the PHP project shipped an out-of-cycle secu...
Microsoft's Dynamic Permissions for AI Agents: A Defender's Guide to Detecting and Containing Rogue Agentic AI
AI Agents Are the New Insider Threat — and Microsoft Just Said the Quiet Part Out Loud Microsoft's latest guidance makes official what many ...