PHP2Shell
sysdig.com/blog/php2shell…

Node2Shell
sysdig.com/blog/node2shel…

ZDI-CAN-33367
sysdig.com/blog/detecting…

🚨 Three bugs. One week. The new patch window is shorter than the news cycle.

🐘 PHP2Shell: unauthenticated RCE in PHP core, exploitation confirmed
🟢 Node2Shell: Node.js Brotli bug, also being exploited
🐧 ZDI-CAN-33367 and five other Linux flaws, one with a public root exploit
and runtime detection are best friends before patches land. Blog links in the replies. 👇

#CloudSecurity #ThreatResearch #PHP #NodeJS #Linux

Mythos access is expanding. Your vulnerability management program doesn’t need a rewrite. 🔒

More defenders can find vulnerabilities faster, but discovery isn’t exploitation. The fundamentals still hold.

Blog: okt.to/oSDBrm

Last chance to register for “Mythos, Decoded” this Thursday, Oct 29 at 8am PT / 11am ET: okt.to/5UTR1P

#CloudSecurity #VulnerabilityManagement #AIAgents okt.to/ZRPbfw

🚨 Node2Shell (CVE-2026-111497, CVSS 9.2): a public repo for this Node.js Brotli flaw appeared about five hours after the fix shipped.

No confirmed in-the-wild exploitation yet, but the patch-to-PoC gap was about a day. Patch in order of reachability: start with services that control.

okt.to/3pTBzk 

#CloudSecurity #ThreatResearch #NodeJS #RuntimeSecurity

🚨 A working root exploit for a Linux kernel bug is public. No CVE. No merged fix.

ZDI-CAN-33367 is a gap in the Dirty Frag fix, with root confirmed on current Ubuntu, Debian, and AlmaLinux. Restrict unprivileged user namespaces and enforce seccomp RuntimeDefault while you wait.
4

#CloudSecurity #ThreatResearch #Linux #RuntimeSecurity

AI agents are writing code, touching production, and acting with real credentials. So who’s watching what they actually do? 🔒

Join Sysdig’s Conor Sherman and Shantanu Gattani on LinkedIn Live to talk runtime security and governance for AI agents. Live demo included.

📅 Nov 5 | ://t.co/37sISH8GP2

#AIDefense #AIAgents #RuntimeSecurity

🚨 PHP2Shell: two critical CVEs in PHP core (CVSS v4.0 9.2). Exploitation attempts began four days before the patch was released.

An unauthenticated attacker can run code with HTTP requests alone. The vulnerable code dates to PHP 5.4 in 2012, so even clean application code is nd assume breach.

okt.to/xlQvRe

#CloudSecurity #ThreatResearch #PHP #RuntimeSecurity

Wide eyes. Racing pulse. A backlog that keeps growing. You may be experiencing Mythos anxiety. 😅

Join our “Mythos, Decoded” webinar to learn how runtime context shows which vulns add real risk. Practical steps, minus the panic.

📅 Oct 29 | 8am PT / 11am ET
W

#CloudSecurity #VulnerabilityManagement #RuntimeSecurity

Sysdig Accelerate ‘26 Japan is a wrap. 🙌

Thank you to our speakers, customers, and partners. The conversations in the room were exactly why we do this: people serious about defending cloud and AI environments at machine speed.

See you next year, Japan. 💚

#Sysdig #CloudSecurity #AIDefense #Japan okt.to/LvyX7Q

Frontier AI models like Mythos can discover vulnerabilities faster than any human. Most advice floating around isn’t helping.

Join us October 29 to separate what’s actually changed from the noise.

Mythos, Decoded: What’s Actually Changed in Vulnerability Management
📅 Oct 29 | ://t.co/xreCeoBQYE

#CloudSecurity #VulnerabilityManagement #AIAgents

Excited to welcome Teri Harrell as Sysdig’s new Chief Human Resources Officer. 🎉

25+ years in talent, development, and org change. Former CHRO at VitalEdge, HR leadership at Red Hat. Exactly who you want leading people strategy at a company moving this fast.

Welcome to the o/lFqsDNhEWd

#Sysdig #LifeAtSysdig #Leadership

Cybersecurity Awareness Month. A good time to remember what causes breaches every other month.

78% trace to system intrusion and social engineering. Vulnerability exploitation up 55% YoY. Human element in 62% of breaches.

MFA works. Least privilege works. Patching works. The to be daily, not annual.

okt.to/yuTSw1

#CybersecurityAwarenessMonth #CloudSecurity #RuntimeSecurity

Just wrapped SecTor 2026 in Toronto. A few takeaways from the show floor.

Runtime is entering the mainstream AI security conversation. AI agents aren’t reliable narrators about their own actions. And the governance angle is resonating more than expected.

We’ve been saying this ee the market catching up.

#SecTor2026 #CloudSecurity #AIDefense #RuntimeSecurity

Security teams didn't lose their edge. The window to use it collapsed.

In 2018: nearly a year to weaponize a vulnerability. By 2025: hours.

The assumption that a human has to be in the loop no longer holds for AI security. Our latest article breaks down what does.

okt.to/H6P1lU 

#CloudSecurity #AIAgents #RuntimeSecurity #AIDefense

September's security theme: a gap between initial access and anyone noticing something was wrong.

Rogue OpenAI agents. ShinyHunters scaling with Claude. A human attacker at machine speed. Crystal Morin's monthly briefing covers it all.

okt.to/ju5QS8

#CloudSecurity ts #RuntimeSecurity

How fast can an AI agent chain two Zammad zero-days and reach root? DIVD says seconds.

The target: DIVD itself, the nonprofit that warns others about exposed systems.

Breakdown, detections & mitigations:
okt.to/iF0krv

#cloudsecurity #ThreatResearch

SBOMs give you visibility into your software supply chain. But what else do you need to defend against attacks? 

Four challenges: inconsistent tool support, untrustworthy data, vulnerabilities that change daily, and internal threats no SBOM can detect.

Full breakdown: okt.to/5QKVCZ

#CloudSecurity #SupplyChainSecurity #SBOM #ContainerSecurity

A typical cloud attack takes 10 minutes. The median dwell time for on-premises threats is 16 days.

Those two numbers explain why cloud defense needs its own benchmark.

5 seconds to detect. 5 minutes to triage. 5 minutes to respond.

Download the 555 Benchmark whitepaper: okt.to/QgS4xe

#CloudSecurity #RuntimeSecurity #CDR #CNAPP

🎉 Welcoming Tomoari Yasuda as Sysdig's new Country Manager for Japan.

Japan is one of the fastest-growing markets in cloud and AI adoption. Nearly 1 million developers. An accelerating threat landscape. Tomoari's here to help customers stay ahead of both.

Welcome to the team! g #Japan #CloudSecurity

AI adoption is growing. The AI attack surface is shrinking. That's not a typo.

Anthropic packages grew 40x. OpenAI grew 14x. 6x more ML packages year over year.

Organizations aren't experimenting. They're building infrastructure. And in cybersecurity, whoever automates faster .co/A8hucH2LmX

#CloudSecurity #AIAgents #RuntimeSecurity #CNAPP