Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
highbug_reportVulnerabilitybug_reportVulnerability
PHP2Shell flaws exploited 4 days before patches; 5.1M hosts exposed
PHP (all versions prior to October 21, 2026 patches). Affects up to 80% of websites including WordPress, Drupal, Joomla. VirusTotal tracks 5.1 million exposed PHP hosts, ~3.8 million with open ports.
PHP22 Oct · 11:09 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
PHP releases emergency patches for critical PHP2Shell RCE flaws
All PHP installations serving web requests: PHP 8.5 below 8.5.12, PHP 8.4 below 8.4.27, PHP 8.3 below 8.3.36, PHP 8.2 below 8.2.35, and all versions back to PHP 5.4.
PHP21 Oct · 12:00 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
PHP2Shell RCE flaws (9.2/10) patch due Oct 21 14:00 UTC, no workaround
PHP versions 8.2 through 8.5 (exact affected versions to be disclosed with patch). All internet-facing PHP deployments are at risk. PHP-FPM, mod_php, and CGI/FastCGI runtimes are affected.
PHP21 Oct · 08:36 UTC