featured
Building “php2shell” detections before coordinated disclosure
We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source.
Featured
The supply-chain risk hiding in your MCP servers
At Black Hat USA 2026, our NOC team found third-party apps leaking photos, phone calls, and PII in the clear. Don’t trust. Verify.