Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical heap use-after-free vulnerabilities in the PHP core allow unauthenticated remote code execution and memory disclosure targeting web servers globally.

avatar
Mateus Dornelas@salenrod8 hours ago

2 intel reports

ARMORY CASTLE Exploits BeyondTrust Remote Support Vulnerability

The suspected PRC-nexus actor ARMORY CASTLE exploited a zero-day vulnerability in BeyondTrust Remote Support appliances to deploy custom SAWFLY webshells and BARECLAW tunnelers for credential theft and lateral movement.

avatar
Arnold Chan@slaz
3 days ago
11
CISA Urges Patching Critical BeyondTrust Remote Support Vulnerability

Cyber threat actors are actively exploiting a critical authentication bypass vulnerability (CVE-2026-102764) in BeyondTrust Remote Support to gain initial access and move laterally.

avatar
ills3c Intel&Coffee@Ills3C
3 days ago
6