Why the AI Attack Surface Extends Your Stack

A Journey into Claude's Sandbox

What started as a question about Claude’s sandbox turned into a connected investigation of container internals, process memory, and authorization tokens. Bishop Fox researcher Chris Davis documents what Claude revealed, what it handed over, and what that means for defense in depth.

Responder Guidance for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

On October 21, 2026, the PHP project disclosed two critical memory-corruption vulnerabilities that can allow unauthenticated remote code execution. Both are fixed in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Every PHP install serving web requests is in scope,

Zilliz / Attu | 2.6.5

Master Key Included: Detecting SolarWinds ARM CVE-2026-28326