Stories
Vulnerabilities
Stories curated for Vulnerabilities

Tech News
PHP2Shell: The AI-Hunted PHP Bugs That Put the Web on Emergency Patch Alert
Two critical remote-code-execution flaws in PHP's core engine, dubbed PHP2Shell, triggered an emergency patch rush after AI-assisted researchers surfaced the bugs and attackers began probing within hours. Millions of servers remain exposed, and the incident shows how AI is now reshaping both offense and defense in cybersecurity.

Security
CISA Warns of Exploited Ivanti VPN Vulnerability and Urges Immediate Updates
CISA says attackers exploited CVE-2026-104935 in Ivanti Connect Secure for remote command execution, credential theft, and data exfiltration; fixed releases are available.