📌 Q&A

Place to ask questions and discuss topics that don't belong under other posts.

🐞 0-Day Insights: PHP RCE

Independent analysis of PHP CVE-2026-109618 and CVE-2026-109619 from first principles: patch reverse engineering and RCA.

📌 Monthly Webinar Access

I host a monthly technical review webinar, looking at the past month's security news. Next webinar is scheduled on Wednesday, 21st October. Between 0-days, AI hacks and global policy shifts, the purpose is to curate real signals that reflect the underlying trends in the field, and offer

🐞 CVE-2026-86950: patch RE + RCA (AI Assisted Methodology)

CoreGraphics Out-of-Bounds Write: Patch Diff & Root-Cause Analysis

⚡️ 0-Day Alert: Apple CoreGraphics RCE exploited in targeted attacks

Update iOS/iPadOS and macOS.

⚡️ 0-Day Alert: Chrome v8 RCE

Update Chrome to 153.0.8010.36/.37

⚡️ 0-Day Alert: Chrome v8 RCE

Update Chrome to 152.0.7977.82/.83

⚡️ 0-Day Alert: IBM LangFlow OSS RCE

LangFlow deployments have been under active exploitation since May.

⚡️ 0-Day Alert: VMware ESXi + vCenter

VMware just released a critical security update for ESXi hypervisor suite (VMSA-2026-0006). Two attack vectors.

⚡️ 0-Day Alert: Google Chrome GPU Remote to Elevation of Privilege exploit in the wild

Update Chrome to 146.0.7680.177/178

⚡️ 0-Day Alert: Google Chrome RCE + EoP in the wild

Update Chrome to 146.0.7680.80

⚡️ 0-Day Alert: Android Qualcomm msm kernel - exploit in-the-wild since December 2025.

CVE-2026-21385: kgsl msm kernel exploited in the wild