Huge shoutout to @calif_io (@Icfr_hax) for discovering PHP2Shell (CVE-2026-109618/19)

Patching is only half the battle. Within 24h, we built #Nemesis simulations to safely test real attacks and prove your defenses actually work

persistent-security.net/post/php2shell…

#PHP2Shell #ThreatToTest

DORA compliance demands proof that controls respond during active adversary emulation.

Nemesis automates attack paths across your stack, turning runtime outputs into quantifiable SIEM/EDR detection rates.

persistent-security.net/post/dora-comp…

#DORA #SecOps #ThreatToTest #Nemesis

There are two types of defenders: those who spend four hours drafting one query, and those who let Nemesis handle the heavy lifting.

Choose peace, choose automation, and reclaim your evenings.

#BlueTeam #AIForSecurity #ThreatDetection #Nemesis

musl-based containers running #OpenSSH below 10.6p2 may accept logins to locked accounts - no credentials needed.

#Nemesis tests this safely in your environment (on-cloud or on-prem with local AI) and generates SIEM rules specific to your stack.

#BreachAndAttackSimulation

Connect with us to see how it works: persistent-security.net/contact-us

Day 1 with #Nemesis takes you through setup, a tailored threat briefing, and your first live attack run in minutes.

It probes and pivots like an attacker so you catch gaps on Tuesday morning with an exact fix—not be surprised by a vulnerability on a Friday night.

#ThreatToTest

While back @goteleport brought us to #NYC to build a setup attendees had to break.

Using #Nemesis we engineered the environment, the clues & the automated backend that kept the CTF running.

Seeing our adversary emulation platform power the chaos was fun.
persistent-security.net/post/teleport-…

With #PHP2Shell, patching is only step one! Have you actually checked if your web servers & WAF rules are holding up against exploitation or are you just hoping for the best?

We put together a breakdown of how #Nemesis runs automated simulations so you can verify your exposure.

Link: persistent-security.net/post/php2shell…

We are happy to share our co-founder Babette De Decker has made the finalist shortlist for Belgium’s Cyber Security Young Professional Award 2026

Her work building #Nemesis is all about making security validation straightforward and practical for teams everywhere.

#ThreatToTest

Loved joining the Fundtruck in Brussels!

Our co-founder Babette De Decker pitched #Nemesis to an expert jury at Greenbizzbrussels alongside 15 top Belgian startups.

Big thanks to the organizers, jury and fellow founders for an inspiring day 😃

🎥: @bymaddyness

#ThreatToTest

PHP2Shell just landed and if you would like to test your sites/application/servers what would be the best tool? Nemesis from @Persistent_Psi , of course!

Two critical unauthenticated RCE flaws in PHP core (CVE-2026-109618 and CVE-2026-109619) let attackers potentially take over t huge range of PHP versions (widely used by WordPress, Joomla, Laravel, Drupal, etc.). Exploitation reports are already circulating. CloudFlare already see huge increase in traffic with attach/RCE patterns. Is your site/application vulnerable?

@Persistent_Psi Nemesis makes it easy. Atomic for PHP2Shell is already available, you just need to run the safe simulation against your PHP endpoints (servers) and get clear, evidence-based results on exposure, prevention, and detection. No custom exploit work required. Continuous BAS lets you validate patches and controls the same way attackers will probe them. Patch immediately, and then prove it works.

#CyberSecurity #PHP2Shell #BAS #Nemesis #BreachAndAttackSimulation #PHP #InfoSec

Meeting #DORA requirement like Articles 25 & 26 means moving beyond basic self-assessments & actively testing how your defenses hold up against real threats

#Nemesis maps threat emulation directly to these mandates to give you repeatable, auditable proof

persistent-security.net/post/dora-comp…

Great to see us featured by the @Cyber_Coalition!

Our co-founder Babette De Decker spoke about her path to Nemesis, why cybersecurity needs diverse talent, and how we're making security validation accessible to all.

cybersecuritycoalition.be/interview/babe…

#Nemesis #ThreatToTest #Security

Nikos Laleas from our team took the stage at the @netpptechnology event to show how #Nemesis runs live, continuous attacks to see what security controls actually hold up.

A huge thanks to the Net++ team for putting together a great session at Hard Rock Cafe.

#ThreatToTest

Conversations at @_c0c0n_ 2026 proved enterprise teams want advanced #securityvalidation without sending sensitive logs to external clouds.

That’s why we built #Nemesis full on-prem execution with zero data leakage. Great connecting with defenders!

persistent-security.net/post/evolving-…

Some environments thrive in the cloud, others demand on-premise control especially in regulated sectors

Nemesis handles both effortlessly by running #localAI model inside your own system.

Get continuous attack validation w/o compromising on where your data lives.

#ThreatToTest

We’re heading to Techtonics!

Our co-founder Babette De Decker will be there representing Nemesis, ready to catch up w familiar faces, make new connections and talk about where defenses break down.

If you're attending, come say hi 👋

#Techtonics2026 #Networking #cybersecurity

Our co-founder @marver caught up with @benarent, Rob Picard to discuss #AI; #redteam vs. #blueteam

Partnering w @goteleport for NYC security speakeasy was amazing, they’re such great people to collaborate with.

🫣 In the end, does your AI beat their AI?

youtu.be/ShMq_vH44LU?si…

Loved catching up with old friends and making new ones at @_c0c0n_ 2026!

Getting such a warm welcome from Kerala Police was a highlight, along with @marver's training session.

Big thanks to the organizers, volunteers and speakers for a great event 👋

#c0c0n2026 #cybersecurity