featured
Building “php2shell” detections before coordinated disclosure
We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source.
Featured
PII and third-party apps: Don’t trust, verify
At Black Hat USA 2026, our NOC team found third-party apps leaking photos, phone calls, and PII in the clear. Don’t trust. Verify.