Upstream

Where we use “Upstream”

• AI Agents & AutomationOpenAI's 948 Linux Kernel Exploits: What the $1.2 Million Test Proved

  OpenAI says its agents turned a kernel scan into 948 root exploits for about $1.2 million. A check of what 948 counts, what the bill covers and what is fixed shows what the test did and did not prove.

  Nov 8, 2026Key term
• CybersecurityCVE-2026-115560: The Third PHP Remote Code Execution Flaw, Explained

  PHP disclosed a third remote code execution path on 23 October, and the October 21 releases don't fix it. Here is who is exposed, why there is no emergency patch, and the one setting to change today.

  Nov 7, 2026
• CybersecurityHow to Detect PHP2Shell and Node2Shell

  No single log line proves PHP2Shell or Node2Shell exploitation. Here are the errors, process events and crash patterns to collect, how to alert on them, and what a clean result can't tell you.

  Nov 7, 2026
• CybersecurityPHP2Shell and Node2Shell: The Complete Guide

  PHP2Shell and Node2Shell are two separate flaws, both exploited and both patched on 21 October 2026. Here is who is affected, what to update, and how to check for earlier compromise.

  Nov 7, 2026
• CybersecurityHow to Patch PHP2Shell on Linux

  Package managers install the PHP2Shell fix but don't prove it is running. Here is how to patch Debian, Ubuntu, Red Hat-family and container hosts, restart correctly and verify the serving process.

  Nov 7, 2026
• CybersecurityThe 25-Server Firewall Campaign

  Dream Research reports one attacker chained a custom PHP2Shell exploit with Fragnesia to root 25 Palo Alto PAN-OS servers, and Unit 42 says it verified the tooling. Here is what the record supports and what to patch.

  Nov 7, 2026