Latest Articles
Nov 3, 2026 | File Security
Where Vulnerable PHP Hides: Assessing PHP2Shell Exposure
On October 21, 2026, the PHP project released fixes for two critical RCE flaws, CVE-2026-109618 and CVE-2026-109619. The PHP advisories rate each at 9.2 on the CVSS scale, and an attacker needs no login to use them. This post covers what two modules in MetaDefender™ Core detect: File-Based Vulnerability Assessment and Software Bill of Materials.
Aug 7, 2026 | Supply Chain Security
Shai-Hulud Returns: ChainDrop Worm Hits npm, Infecting Hundreds of Packages
Dec 4, 2025 | Supply Chain Security
Shai-Hulud 2.0: How to Secure Your Software Supply Chain Against the Second Wave
Sign up for the OPSWAT Newsletter
Get the latest OPSWAT company updates along with event information and the news that's driving the industry forward.