Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS

PHP2Shell Exposure Depends on More Than Whether You Use PHP

PHP2Shell exposure can extend into bundled runtimes, containers, and hosted applications. Learn why identifying affected PHP is only the first step toward validating exploitability.

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE

Horizon3 researchers analyze CVE-2026-106173, a critical Fortinet FortiSIEM vulnerability affecting an unauthenticated gRPC service. The deep-dive explains how path traversal and null-byte handling enable arbitrary file writes and remote code execution, along with indicators of compromise for defenders.

Zammad CVE-2026-102489: Session Leak to RCE