
Swarm Intelligence
Current threats, seen through an attacker’s eyes. Timely analysis from CovertSwarm’s ethical hackers on emerging risks and security headlines, with the unique perspective and practical intelligence you won’t find elsewhere.


Release: local checker for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
Read MoreRelease: local checker for PHP2Shell (CVE-2026-109618 and CVE-2026-109619)
Why a vulnerability research agent has to look beyond one file
Read MoreWhy a vulnerability research agent has to look beyond one fileWhen the API Lies – How RAID Discovered a Critical Privilege Escalation by Reading JavaScript
Read MoreWhen the API Lies – How RAID Discovered a Critical Privilege Escalation by Reading JavaScriptHow RAID found unauthenticated customer data in a retail GraphQL API
Read MoreHow RAID found unauthenticated customer data in a retail GraphQL API
When “Just Logging In” Isn’t Just Logging In: A look at xrdp and CVE-2026-33145
Read MoreWhen “Just Logging In” Isn’t Just Logging In: A look at xrdp and CVE-2026-33145CVE-2026-33727 – When “Low Privilege” Isn’t Low Enough: A Pi-hole LPE Story
Read MoreCVE-2026-33727 – When “Low Privilege” Isn’t Low Enough: A Pi-hole LPE Story
Project Glasswing is impressive. But what about the rest?
Read MoreProject Glasswing is impressive. But what about the rest?
Handala & MuddyWater: MDM Weaponization at Enterprise Scale
Read MoreHandala & MuddyWater: MDM Weaponization at Enterprise Scale