Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

PHP2Shell (CVE-2026-109618 and CVE-2026-109619) introduces two critical remote code execution vulnerabilities affecting PHP, making it important for security teams to identify affected systems, understand their exposure, and investigate potential exploitation.

As frontier AI accelerates exploit development, security teams need more than vulnerability severity scores to determine what demands attention. They need evidence of what can actually be exploited. In this demo, see how the CrowdStrike Exposure Validation Agent uses frontier AI to generate exploits for supported CVEs and test them in a controlled lab environment. Explore how Falcon Exposure Management evaluates exploitability conditions, documents attack prerequisites and potential impact, and provides evidence of successful exploitation.

Network Detection and Response (NDR) has traditionally come with a heavy price tag, including complex deployments, expensive infrastructure, constant tuning, and skilled analysts to manage the workload. That model was built for enterprise SOCs, not MSPs protecting dozens or hundreds of customers.

For nearly 30 years, WatchGuard has had one mission: making enterprise-grade cybersecurity accessible to every business. Founded in Seattle in 1996, WatchGuard now protects more than 1.5 million businesses in 81 countries through a network of 25,000 partners.

Learn how to set up role-based access control (RBAC) in Keeper Security’s admin console. This video covers the difference between Roles and Teams, how the default Keeper Administrator and All Users roles work, how to add a role and configure its enforcement policies, and how to duplicate a role. It also covers how to delegate administrative permissions by node, including how Cascade Node Permissions applies those rights to sub-nodes.

As U.S. and EU regulators increase scrutiny of third-party cyber risk, organizations face growing pressure to demonstrate effective vendor oversight, continuous monitoring, and risk management. In this Bitsight webinar, Jake Olcott, VP of Government Affairs and former legal counsel to the House Homeland Security Committee and Senate Commerce Committee, explores the regulatory developments shaping third-party risk management (TPRM) heading into 2027.

Could PHP2Shell pose a cybersecurity risk on the scale of Log4j? Newly disclosed critical PHP vulnerabilities are raising concerns about widespread exposure across enterprise environments and third-party supply chains. With millions of potentially affected systems and limited patching options for legacy PHP versions, security teams face a complex remediation challenge.

The days of vendors selling naked tools that drive up professional services revenue are coming to a close. AI is making it possible to not just automate human tasks, but to deliver an entirely new agent operator-based platform. Humans become managers of agentic operators, and the operators do the day-to-day work of securing web applications and APIs.

Network Map helps admins quickly visualize network topology, understand device relationships, and troubleshoot connectivity issues from a single interface. Learn how to access and use Network Maps in Sophos Fusion to locate devices, utilize Live Discover queries to retrieve device history, and block or release hosts with Active Threat Response (ATR) powered by Sophos Fusion APIs. Ask questions and get expert answers in the Sophos Community.

Is an AI apocalypse actually possible? Harlan Parrott and Matt Duren investigate the doomsday theories and explain why unmanaged agents and zero-days are today’s true risks. Full new episode now live on our channel!