Key Takeaways PHP2Shell exposes critical memory-safety vulnerabilities in PHP’s core engine, including a use-after-free that can be exploited to achieve remote code execution. RunSafe recreated the vulnerability and developed a working exploit that successfully...
Key Takeaways AI is exposing thousands of hidden software vulnerabilities. Anthropic’s Mythos uncovered confirmed bugs across major operating systems and browsers, including flaws that persisted for decades. Memory safety vulnerabilities pose a critical infrastructure...
Artificial intelligence (AI) is reshaping how software is written and how vulnerabilities emerge. Developers are no longer limited to reusing open-source components or third-party libraries and instead are asking AI to build code on demand. This “vibe coding”...
Memory safety vulnerabilities have been around for decades and are one of the most persistent and exploitable classes of software weaknesses. Memory corruption flaws, when exploited, allow attackers to execute arbitrary code, escalate privileges, bypass security...
Operational Technology (OT) security isn’t just a technical problem—it’s a national security imperative. In the latest episode of Exploited: The Cyber Truth, RunSafe Security Founder and CEO Joe Saunders joined host Paul Ducklin to answer a big question: Can we fix OT...
Zero-day vulnerabilities are the bogeymen of cybersecurity. They lurk unseen in our systems until the moment of exploitation, leaving defenders with no time to prepare. Our goal at RunSafe is to give defenders a leg up against attackers, so we wondered: What if we...