Tagged articles

vulnerability remediation

4 articles · Page 1 of 1

Oct 25, 2026 · Information Security

PHP2Shell RCE (CVE-2026-109618/19): Patch Guide, Aikido Images & Mitigations

This guide covers two critical PHP RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619) with CVSS 9.2, providing patch versions (8.5.12, 8.4.27, 8.3.36, 8.2.35), free Aikido patched container images for older branches, verification commands, mitigations like memory_limit=-1 and disabling session.upload_progress, and post-patch compromise checks.

Aikido ImagesCVE-2026-109618CVE-2026-109619

0 likes · 14 min read

PHP2Shell RCE (CVE-2026-109618/19): Patch Guide, Aikido Images & Mitigations

ByteDance SE Lab

Jun 17, 2026 · Information Security

Server Firmware Security Practices for AI-Infra: Threat Modeling, Trusted Boot, and Large‑Scale Remediation

The article analyzes the rising firmware security challenges of AI‑Infra servers, presents a full‑machine threat model, outlines trusted‑boot and measurement architectures, shares a large‑scale CVE‑2023‑34335 remediation case, and discusses tools and long‑term security evolution for heterogeneous server fleets.

AI infrastructureBoardSentinelSecure Boot

0 likes · 24 min read

Server Firmware Security Practices for AI-Infra: Threat Modeling, Trusted Boot, and Large‑Scale Remediation

Black & White Path

Jun 4, 2026 · Information Security

Exploit Attacks Overtake Phishing: AI Cuts Weaponization Time to Negative 7 Days

Verizon's 2026 Data Breach Investigation Report shows exploit-based attacks now account for 31% of breaches, surpassing phishing, while AI-driven weaponization shortens the window to negative seven days, forcing defenders to confront longer patch cycles and a need for automated, secure‑by‑design practices.

AI weaponizationdata breach investigationexploit attacks

0 likes · 8 min read

Exploit Attacks Overtake Phishing: AI Cuts Weaponization Time to Negative 7 Days

HomeTech

Dec 28, 2021 · Information Security

SQL Injection Vulnerability Analysis and Defense Strategies

This article provides a comprehensive analysis of SQL injection vulnerabilities, covering their principles, testing tools, repair methods, and defense strategies, with practical implementation guidance for secure web application development.

Database SecurityOWASPParameterized Queries

0 likes · 15 min read

SQL Injection Vulnerability Analysis and Defense Strategies