Archive
Every issue
Each brief cites the KEV catalog version and EPSS score date it was built from.
- PHP2Shell tops 10 new exploited vulns; CISA's PHP deadline is Thursday
PHP2Shell is being rapidly weaponized, with code execution confirmed on honeypots so far. Plus Nextcloud's Collabora app, a WAF flaw, the Plex2Shell chain, Arista VeloCloud and Siemens Software Center.
Free every Tuesday. After you subscribe, check your inbox and click the link to confirm. One click to unsubscribe. See our privacy policy.