🍀 Hey, how many times in the last 24 hours have you heard "PHP" and "patch immediately"? Exhausting, isn't it? Yes, php2shell is a serious vulnerability, and it deserves to be treated as one. Maybe it's time to change the approach a little. stream.security/post/php2she…
The alert isn't a call to action anymore. It's a receipt.
Stream already found it, stopped it and fixed it.
Autonomous production defense.
So you can do other… stuff.
New Cloud Defense Goat scenarios turn 2025–2026's real Kubernetes and container-runtime research into attack chains. Don’t assume your tools are ready for the latest cloud-native attacks. Prove it.
stream.security/post/goat-go…
Stream.Security is expanding beyond cloud-native environments.
👉🔗 stream.security/post/stream-…
#CloudSecurity #HybridCloud #VMware #CDR
⚠️ axios was compromised. If you write JavaScript, you've used it, it's the HTTP client in virtually every Node.js application, with 60M+ weekly downloads.
~2-3 hours of exposure.
WHAT YOU NEED TO KNOW - LiteLLM Supply Chain Attack 🚨
Our Threat Research team is analyzing a cascading supply chain attack, TeamPCP, that crossed five ecosystems in under a week. The next stage is unfolding now (analysis coming soon).
Full breakdown from our Principal Security Researcher Petr Zuzanov 👇 stream.security/post/invisib…
Live Workshop with @latiotech on Dec 9th 📅
Cloud incidents are getting faster and harder to untangle. (cc: Sha1-Hulud 2.0) 🪱
Does your team have what it takes to respond effectively?
Here's the deep dive into how we investigated the Shai-Hulud 2.0-style attack we created: stream.security/post/the-sha…








