Blog
Security incidents explained for people who run web apps: what happened, why it matters and what to do.
CISA lists PHP2Shell as exploited; mass website hacks remain unproven
CISA now lists two PHP flaws as exploited. They allow code execution with no login. What is confirmed so far, and what to do if you run PHP.
The camada team · · 4 min read
AI agents tried 1,200 sites and planted web shells, records show
A researcher found open Cairn panels: one operator's AI agents tried over 1,200 sites and planted web shells. Few breaches are independently confirmed.
The camada team · · 3 min read
Square Enix warns attackers are logging in with reused passwords
Square Enix says attackers got into accounts with passwords from other services. It published no count and says a full password reset is possible.
The camada team · · 3 min read