ByteBrief
We're a portrait publication through and through. Turn your phone back and your briefing picks up right where you left it.
(We tried widescreen once. It wasn't us.)
OffSec announced a free hands-on lab on October 28th to help defenders study critical PHP2Shell flaws. The lab addresses CVE-2026-109618 and CVE-2026-109619, which researchers found in August and disclosed by October 21. These vulnerabilities allow attackers to take over servers without passwords, affecting roughly 70% of websites using PHP.
Tap to vote and see what everyone thinks.
Summary by ByteBrief
Millions of PHP2Shell Exploit Attempts Fail