-
OOM to RCE: The Chaotic Kitchen Attack That Breaks PHP
Simple Analogy First (for a non-technical person) Imagine a busy restaurant kitchen (the PHP web server) that handles customer orders (HTTP requests). Each order uses tables, cutting boards, and recipe cards (memory). Normally, when an order finishes or fails, the kitchen carefully cleans everything and resets the stations before the next customer. An attacker sends…
-
Critical PHP Vulnerabilities (PHP2Shell): CVE-2026-109618 & CVE-2026-109619 – What Happened, Who Found Them, Impact, and How to Fix
On October 21, 2026, the PHP project released emergency security updates for two critical vulnerabilities in the PHP runtime itself. Collectively nicknamed PHP2Shell, these flaws (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated remote code execution (RCE) on affected servers. Both received a CVSS v4.0 score of 9.2 (Critical). These are not application-level bugs in WordPress, Laravel, Drupal,…
-
How to Fix “No Network Drivers Found” and Bypass the Internet Requirement When Installing Windows 11 in VMware Workstation
Introduction If you’ve ever tried installing Windows 11 in a VMware virtual machine (VM), you know the frustration: you reach the shiny “Let’s connect you to a network” screen, only to see “Ethernet0 – Not connected” and a prompt to install drivers that Windows setup simply can’t find. The “Next” button stays grayed out, and…
-
Cracking SSH Private Key Passphrases Using ssh2john and John the Ripper
Introduction SSH key-based authentication is widely considered more secure than password-based login. However, security does not end at key generation. If a private SSH key is compromised and protected with a weak passphrase, it can often be cracked offline—leading to full system access. In this blog post, we will walk through a realistic penetration testing…
-
The $285 Billion “Markdown Meltdown”: How a Few Text Files on GitHub Shook the Global Stock Market
In late January 2026, Anthropic quietly released something that looked utterly harmless: a set of open-source plugins for their Claude Cowork tool. No flashy keynote, no billion-dollar acquisition announcement—just a GitHub repository filled with Markdown files, JSON configs, and simple instructions. By early February, roughly $285 billion in market value had evaporated from software, legal…
