Testing the POCs in the lab with Claude, whilst drinking tea! (how 2026 of me :P /S cringe) and.... we have some interesting and useful intel..... exploitation of these CVEs doesn't appear trivial.... "Most likely why: the authors targeted a specific build (“Ubuntu php 8.5.4 profile-21”) with hard-coded struct offsets and a build-specific address delta. Vanilla upstream 8.5.4 either doesn’t carry that exact reachable path or the heap groom depends on that build’s allocator state. I’ll also be candid: this CVE pair is described in the PoCs themselves as leaked/pre-embargo/”presumed,” and I can’t independently verify it maps to a reproducible upstream bug." #PHP

Lidl begins building its first ever pub bbc.in/4smoROy

The U.S. military offers service members avenues to avoid combat or even be discharged from the ranks if they can prove that they hold religious, moral, or ethical objection to “war in any form.” interc.pt/4uED6kd

Cocaine sharks are terrorising tourists in the Caribbean Sea trib.al/YDfbXPl

I see some weird things but this takes the biscuit. A vulnerability in the Companies House website, that let anyone view the private dashboard of any one of the five million registered companies, see directors' personal details. And modify them.

Easiest way to test for Log4Shell (even in 2025) 🤠 Example 👇