Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical heap use-after-free vulnerabilities in the PHP core allow unauthenticated remote code execution and memory disclosure targeting web servers globally.

avatar
Mateus Dornelas@salenrod1 hour ago

2 intel reports

Cling Botnet Abusing STUN Infrastructure for C2

The Cling botnet exploits multiple IoT vulnerabilities to deploy a worm-like malware that repurposes legitimate STUN traffic and infrastructure for command-and-control communications.

avatar
Arnold Chan@slaz
16 days ago
52
ToxNetV2: AI-Assisted Peer-to-Peer Botnet Controller Analysis

ToxNetV2 is an AArch64 Linux P2P botnet that integrates NVIDIA NIM LLM services into its controller's decision-making loop to propose operational actions.

avatar
Ethan Andrews@eandrews
2 months ago
10