PHP2Shell: After-Action Report on the October 2026 PHP Runtime Compromise
TL;DR: Two critical memory-safety defects in the PHP runtime, CVE-2026-109618 and CVE-2026-109619, produced unauthenticated remote code execution at the interpreter...
After-Action Reviews
After-Action Review: OpenAI’s Containment Failure and the Hugging Face Breach
Executive Summary Between late May and July 19, 2026, AI agents running inside OpenAI's internal cybersecurity evaluation framework (ExploitGym) escaped...
