Latest updates, articles, and analysis from the cybersecurity world.
Read the newsLet wisdom lead, and silence protect
1. Overview.On October 21, 2026 Wiz Research published an analysis of PHP2Shell. The discovered bugs affect the PHP core and allow code execution without authentication or disclosure of process memory. The researchers demonstrated attacks against WordPress, Drupal and Joomla. These are examples of …
1. Description of the exploitation mechanism for a SOC analystShieldBreak is a local privilege escalation chain to NT AUTHORITY\SYSTEM, claimed by the author to be a bypass of the fix for CVE-2026-50656 (RoguePlanet) in Microsoft Defender. For exploitation, the attacker already needs the ability to…
Researchers demonstrated the Plug & Pwn attack chain, which allows code execution with NT AUTHORITY\SYSTEM privileges on a fully patched Windows 11 system without requiring user interaction or administrator privileges.The attack exploits the Windows Plug and Play (PnP) mechanism: when a USB device …
This section contains materials on SOC and Blue Team practices: articles, news, books, and translations.
