New: Cymulate Cowork for Agentic Cyber Defense Engineering

Learn More

PHP2Shell Vulnerabilities: What to Patch and How to Validate Defenses

Learn More

Cymulate named a Customers' Choice in 2026 Gartner® Peer Insights™

Learn More

Introducing Cymulate Vero AI for Agentic Cyber Defense Engineering

Learn More

Book a Demo

Cymulate Research Labs

PHP2Shell CVE-2026-109618 and CVE-2026-109619: corrupted PHP memory leaks secrets to an attacker shell

PHP2Shell (CVE-2026-109618 and CVE-2026-109619): The PHP Vulnerabilities Security Teams Should Patch Now

Patch critical PHP2Shell vulnerabilities and validate your defenses against exploitation attempts with Cymulate Exposure Validation.

WSSnatch attack: a WebSocket tunnel carries an OAuth token from Google Cloud Shell port 900 to an attacker’s browser

October 22, 2026

CVE-2026-85267: CloudShell WSSnatch

PHP2Shell CVE-2026-109618 and CVE-2026-109619: corrupted PHP memory leaks secrets to an attacker shell

October 22, 2026

PHP2Shell (CVE-2026-109618 and CVE-2026-109619): The PHP Vulnerabilities Security Teams Should Patch Now

September 17, 2026

Trusted by Design? How Headless Claude Code Executed Host Commands Through Repository-Controlled Git Configuration

September 3, 2026

Read-Only Is a Lie: An Entra ID Privilege Escalation

August 11, 2026

When Monitored Content Strikes Back: Account Takeover in Microsoft Purview

The Pipe That Trusted Everyone

CVE-2026-35603: One Writable Folder, Every User Compromised: Exploiting Configuration Trust in AI Coding Tools

CVE-2026-7791: Privileged by Default

When a Web Search Becomes a Backdoor: Remote Code Execution in Codex CLI via Prompt Injection and Binary Hijacking on Windows

AKS RunCommand Vulnerability Enables Cross-Cluster Privilege Escalation

When AI Tools Become the Backdoor: Zero-Click RCE via Prompt Injection

CVE-2026-32196: One-Click RCE via Windows Admin Center Control Flow Hijacking

CVE-2026-32196: One-Click RCE via Windows Admin Center Control Flow Hijacking

1 2 3 4 5 / 5