---
title: "camada blog: security incidents, explained for web apps"
description: "What happened in real security incidents, why it matters to anyone running a web app, and what to do about it. Short posts, with sources."
url: https://www.camada.app/blog
last_updated: 2026-11-03
---

# Blog

Security incidents explained for people who run web apps: what happened, why it matters and what to do.

[RSS feed](https://www.camada.app/blog/rss.xml)

1. ## [CISA lists PHP2Shell as exploited; mass website hacks remain unproven](https://www.camada.app/blog/php2shell)

   CISA now lists two PHP flaws as exploited. They allow code execution with no login. What is confirmed so far, and what to do if you run PHP.

   The camada team · October 27, 2026 · 4 min read
2. ## [AI agents tried 1,200 sites and planted web shells, records show](https://www.camada.app/blog/cairn-ai-agents-web-shells)

   A researcher found open Cairn panels: one operator's AI agents tried over 1,200 sites and planted web shells. Few breaches are independently confirmed.

   The camada team · October 20, 2026 · 3 min read
3. ## [Square Enix warns attackers are logging in with reused passwords](https://www.camada.app/blog/square-enix-password-reuse-logins)

   Square Enix says attackers got into accounts with passwords from other services. It published no count and says a full password reset is possible.

   The camada team · October 20, 2026 · 3 min read

## Sitemap

[Every page on this site](https://www.camada.app/sitemap.md)