PHP2Shell: What Security Teams Need to Know About CVE-2026-109618 and CVE-2026-109619
On October 21, 2026, the PHP project shipped emergency releases for two critical memory-safety bugs...
CloudSec Blog by ARMO
Most viewed articles
PHP2Shell: What Security Teams Need to Know About CVE-2026-109618 and CVE-2026-109619
On October 21, 2026, the PHP project shipped emergency releases for two critical memory-safety bugs...
Agentic AI Security Platforms: What Agent Logs Miss
An agent’s logs are written by the agent. Every framework log, trace span and tool-call...
Zero Trust for AI Agents: What to Verify When There Is No Session
The agent that worries you is authorized. It holds a service account you provisioned, calls...
Agentic AI Security Risks, Ranked by Recovery Cost
The board wants to know which AI agent risk to fund first, and a likelihood...
NIST AI Agent Authorization: Five Asks Mapped to Kubernetes
NIST has published no AI agent authorization standard, and nothing in its February 2026 draft...
AI Agent Identity Security: Where an Agent’s Baseline Lives
Identity governance cannot tell you which AI agent did something. It records which identity is...
AWS Agentic AI Security Scoping Matrix: Classifying Agents
The support triage agent is on your inventory as Scope 2. It reads tickets, drafts...
What Is Agentic AI Security? The 3 Layers and Their Owners
Two of the three layers of agentic AI security already have an owner in your...
AI Agent Security: The Two Ways an Agent Fails, and the One Your Stack Misses
The support agent your team approved last quarter read a ticket, queried the customer database,...
WebInject: The Web Agent Prompt Injection With No Payload
A browser agent in your cluster opens a supplier portal, screenshots it, and clicks somewhere...
How Far Can Prompt Injection Reach in Agentic Coding Assistants?
The blast radius of a prompt injection against your coding assistant was set weeks ago,...
Prompt Injection Through Tool Output Is Two Events (Your Screens Read One)
Tool output is untrusted because your own systems produce it. That is the part of...
Continue as a guest