The all-in-one solution against external threats
New York, Paris, London
Joined January 2013
- Tweets5.2K
- Following1.6K
- Followers3.4K
- Likes2.6K
What exactly is going on with the GitHub Phishing kits impersonating banks? Our analyst Dan has the answer as he talks through this perplexing fraud trend.
eu1.hubs.ly/H0zh15y0
CybelAngel retweeted
A critical PHP flaw was found yesterday. PHP powers ~3 of every 4 websites worldwide.
Within 24h, about half the exposed sites had already fixed it — the other half haven’t.
Which half is your site in? Test it in 10s, no login 👇
php-check.cybelangel.com
PHP runs ~3 of every 4 websites online. It just shipped an emergency fix for 2 critical pre-auth RCEs (CVSS 9.2), already being mass-exploited. Which of YOUR sites are exposed? Find out thanks to @CybelAngel
Find out in seconds. Free, non-destructive: eu1.hubs.ly/H0zhh-b0
🔴 Breaking: two potentially unauthenticated RCE flaws in PHP core (CVE-2026-109618, CVE-2026-109619, CVSS 9.2) leaked before the embargo.
Fix lands today at 14:00 UTC. 883,717 hosts get none.
Timeline + what to do is all in our guide below:
eu1.hubs.ly/H0zgRKk0
#php2shell
Our dream duo, Mehdi and Joseph are heading to the windy city on October 28th to attend CyberRisk Chicago. Come by our stand for a personalised demo of our powerful CybelAngel platform on the day!
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems: eu1.hubs.ly/H0zcktm0
Looking for our team at @itsa_ITSecurity this year?
Find everything you need to know below.
📍 We’ll be at booth 7-501.
You can find us on-site all day, October 27–29!
95% of organizations increased their TPRM budgets in 2025. So, where exactly does that leave your program, and more importantly, is it built to deliver on its purpose?
Download our report: eu1.hubs.ly/H0z6nxs0
UTA0576 gained root access to a fully patched Ivanti VPN, then targeted AD credentials, LAPS passwords and BitLocker recovery keys, without malware or a web shell.
Our team breaks down the threat: eu1.hubs.ly/H0z69930
Our jobs board is packed with internships, analyst roles, and leadership positions so don’t forget to take a peak today!
eu1.hubs.ly/H0z28-S0
As reported by the BBC, Hobbs, Whistles and Phase Eight owner TFG London has confirmed a cyber security incident, with H&M also facing a separate claim of attack: bbc.com/news/articles/cwly38…
Retail and luxury are firmly in the crosshairs. Our latest threat intelligence note breaks down what that means for your org: cybelangel.com/blog/luxury-s…
What do you need to know about CVE-2026-85097 a critical flaw in a WordPress plugin?
✅ The flaw is CVSS 10.0, unauthenticated, and already exploited
✅ It only takes one agency-built microsite on your estate to become the entry point
✅ The patch window closed
We’re thrilled to be attending the upcoming CyberDefenseCon in Orlando, Florida!
Mehdi and Saakshi will be on the ground to meet you all, and have some great discussions on all things cyber threat exposure.
Join us there from October 20-21 in sunny Orlando!
How old is the oldest CVE Flax Typhoon exploited last week?
China-linked actors are still finding this generation of infrastructure exposed on the public internet long after it should have been retired.
0%5 years
0%8 years
0%11 years
0%Over a decade
0 votes • Final resultsFull breakdown of all five Flax Typhoon CVEs plus the four other stories from last week’s roundup: cybelangel.com/blog/cyber-ro…
Interested in finding out what happens to cybercriminals once criminal proceedings begin?
Our Advanced CyberOps analyst Dan-Madalin tackles these questions in our latest blog, after inviting the Parisian Cybercrime prosecution squad into our office: cybelangel.com/blog/what-the…
British online fast-fashion retailer, Asos has told its customers that hackers are in possession of detailed profiles of potentially millions of the online store's users. The BBC reports that it was contacted by the cyber criminals behind this attack: eu1.hubs.ly/H0yYwWN0
Atlassian's CVE-2026-21589 was exploited two hours after public details landed. So, what exactly does your business need to know? eu1.hubs.ly/H0yYv-z0
Day one of @Les_Assises has been a brilliant and busy one for the CybelAngel team in Monaco!
Check in with us at Stand B13 tomorrow! We're here until the 10th.
