arcticwolf

PHP2Shell: Critical PHP Vulnerabilities Enable Unauthenticated Remote Code Execution

In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...

Does React run on AWS Lambda? Choosing between Lambda Web Functions, Next.js, and Vercel

On October 12, 2026, AWS announced "AWS Lambda Web Functions." This is a new execution model that allows standard Node.js web ...

Reproducing a Java Web Development Environment from Around 2018 | Learning Peripheral Technologies with Eclipse, Tomcat, and Spring

IntroductionWhen developing web applications in Java, simply learning Java syntax and Spring annotations is not enough to understand the full picture of actual development.A single application is ...
The Hacker News

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

HTTP/2 upload use-after-free that a malicious server can trigger; code execution was demonstrated under strict conditions.
Cyber Security News

Meta Zurp AI Toolkit Connects Burp Suite With AI Coding Agents for Bug Bounty Research

Meta has introduced Zurp, an open-source toolkit that connects Burp Suite workflows with AI coding agents for approved bug bounty research.
SiliconANGLE

IBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse for fix requests

IBM Corp. and its Red Hat unit said today that their Lightwell open-source security program has found and fixed more than 400 previously unknown vulnerabilities in widely used Java libraries. The ...