Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical heap use-after-free vulnerabilities in the PHP core allow unauthenticated remote code execution and memory disclosure targeting web servers globally.

avatar
Mateus Dornelas@salenrod8 hours ago

2 intel reports

TeamPCP Multi-Vendor Supply Chain Attack Summary

Threat actor TeamPCP executed a massive supply chain campaign compromising GitHub Actions from Aqua Security and Checkmarx, VS Code extensions, and npm packages to deploy a multi-stage credential stealer and a self-propagating worm.

avatar
ills3c Intel&Coffee@Ills3C
3 days ago
7
FAUX#ELEVATE Targets French Enterprises via CV Lures

The FAUX#ELEVATE campaign uses heavily obfuscated VBScript lures targeting French corporate environments to deploy a multi-stage toolkit including XMRig miners and browser credential stealers.

avatar
Tim Peck@timpeck
7 months ago
1,206