News

TL;DR HTTP2Shell (CVE-2026-111497) is an out-of-bounds write in Google's Brotli decoder, versions 1.0.3 through 1.2.0. An unauthenticated attacker who gets crafted Brotli data into a vulnerable decoder can crash the process, read its memory, or in some cases run code. It was first reported as a Node.js bug ("Node2Shell"), but the flaw is in the…

TL;DR A supply chain security investigation has identified malicious code in LiteLLM version 1.107.0, a Python package distributed through PyPI. The affected package contains multiple files designed to execute code automatically when Python starts, retrieve attacker-controlled payloads, and maintain persistent access to compromised environments. Based on the analyzed package, this should be treated as a…

TL;DR PHP has released emergency fixes for two critical memory-corruption vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both allow unauthenticated remote code execution on default configurations. Details were leaked before the coordinated disclosure, which forced an accelerated release. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now. UPDATE: Now Official With Patch Versions UPDATE (October 21, 2026 14:00…

What started as a visibility problem has become something much more dynamic and urgent: understanding what is actually happening inside modern cloud environments, in real time. As infrastructure becomes more distributed, ephemeral, and increasingly shaped by AI, security teams need more than snapshots. They need context. They need precision. And they need answers that move…

Cloud Security has changed Teams are moving faster, architectures are getting more dynamic, and the old way of securing cloud environments with disconnected tools and static findings is no longer enough. Security leaders need more than posture snapshots. They need real-time context, runtime intelligence, and the ability to focus on what is actually exploitable. That…