🧰 Wiz Research

The items that name it 3

• PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
  article2026-10-21It is written here as Wiz research: describes remote memory disclosure that can expose passwords, authentication tokens, API keys and other secrets without first achieving code execution..
• Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
  advisory2026-09-10

  Identified and analyzed in-the-wild exploitation of the three Artifactory CVEs; source of the blog post.

• keyv and cacheable npm Package Hijacked in Supply Chain Attack
  writeup2026-08-04

  Investigated and published findings on the keyv/cacheable npm supply chain attack, including IOCs and technical analysis