Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

PHP2Shell Critical RCE Vulnerabilities CVE-2026-109618 and CVE-2026-109619

Critical remote code execution vulnerabilities in PHP core sessions have leaked ahead of scheduled patching, affecting versions 5 through 8.

avatar
Mateus Dornelas@salenrod9 hours ago

2 intel reports

INC and The Gentlemen Ransomware AI-Driven Infrastructure

Affiliates of INC and The Gentlemen ransomware groups are using an AI-orchestrated infrastructure featuring the 'Phantom' autonomous red team framework to exploit edge devices and deploy ransomware.

avatar
Tim Peck@timpeck
1 day ago
19
Device-code OAuth Phishing Exploiting Microsoft Identity Flows

Attackers are abusing legitimate Microsoft device-code OAuth workflows via deceptive document-verification pages to steal access tokens and bypass MFA.

avatar
Yeji Hwang@yezyizhere
2 months ago
20