Resources
Radical thinking and constant research inform all we do. Think ahead with shared intelligence from our Swarm of ethical hackers.
php2shell: moving beyond a lab proof of concept to code execution with ASLR enabled
The Swarm developed a working exploit for php2shell (CVE-2026-109618 and CVE-2026-109619). It achieved unauthenticated remote code execution with address space…
Release: local checker for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
An Open Source host-local vulnerability checker for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell).
PHP2SHELL: Critical PHP vulnerabilities
PHP has released fixes for two critical remote code execution vulnerabilities. This post sets out what PHP has confirmed and…
Why your cyber hygiene looks fine on paper but still fails under attack
A configured control isn't necessarily a control that works. Attackers don't need sophisticated exploits when the basics are missing, and…
Why a vulnerability research agent has to look beyond one file
A weakness that looks convincing in one file can vanish once you see the whole application. Luke Potter explains how…
CovertSwarm named a Gartner Sample Vendor for Agentic Red Teaming
The question for security leaders is who's in charge of the agents that test their defenses. We think it should…
Security by obscurity is dead.
On June 18, 2026, an OpenAI agent got into the Medicare statistics reporting service portal run by Services Australia. ABC…
The growing impact of nation-state cyber-attacks on businesses
Nation-state cyber threats no longer stop at government and defense. Here's what makes these attackers different, and what it actually…
Swarm spotlight on the community: Thomas Cox on hacking, humanity, and the future of cybersecurity.
In this episode of Swarm Spotlight, Jayson E. Street sits down with national security and cybersecurity veteran Thomas Cox for…