Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical RCE PHP2Shell Vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Critical heap use-after-free vulnerabilities in the PHP core allow unauthenticated remote code execution and memory disclosure targeting web servers globally.

avatar
Mateus Dornelas@salenrod11 hours ago

2 intel reports

A China-linked operator utilized the AI-driven Cairn framework to conduct 66 intrusions against government and industry targets across Asia, leveraging LLM agents for automated exploitation.

Russian intelligence services APT28 (GRU) and FSB Center 16 are systematically compromising SOHO and enterprise routers to build global proxy networks and conduct DNS hijacking for credential theft.