vivek@kali:~/blog$ grep -r "threat-intel" ./posts/

#Sigma rules

Security research, ethical hacking tutorials, cybercrime case studies, and threat intelligence from the field.

PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender CVE-2026-5242
Featured · 16 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical Unauthenticated PHP RCE — Deep Technical Analysis, Burp Suite Detection & Blue Team Hunting Guide for Sentinel and Defender
PHP2Shell is the name for two critical, unauthenticated remote code execution flaws in PHP core (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) that affect roughly 70% of the internet. Details…
Oct 22, 2026 Cyber Awareness
Blue Team Burp Suite CVE-2026-109618 CVE-2026-109619
Read Full Post →
Volt Typhoon Threat Hunting in 2025: KQL, Splunk, and Sigma Detection Guide for Living-Off-the-Land APT CVE-2026-5188
APT Analysis
Volt Typhoon Threat Hunting in 2025: KQL, Splunk, and Sigma Detection Guide for Living-Off-the-Land APT
A complete threat hunting guide for detecting Volt Typhoon living-off-the-land techniques. Includes verified KQL queries for Microsoft Sentinel,…
Jul 29, 2026 14 min
Chinese APT CISA advisory critical infrastructure