Tolmo ads

PHP2Shell, explained in a short video by Maximilien Chanu. 🎥 Picture a hotel . A request fails 🚫 and PHP checks it out, but the old keycard 🔑 still opens the door 🚪 . An attacker moves in, and one request gives them full control of the server. The fix is out, but a fix is also a map 🗺️ . AI can turn it into an attack faster than any human. Some sites are already offline. Update PHP today: 8.2.35 · 8.3.36 · 8.4.27 · 8.5.12 Read the backstory by Mihail Kirov on https://lnkd.in/g7_R56rs #PHP2Shell #AppSec

One byte. That's all it took to crash parts of nginx, the software running a huge share of the internet. Last week we shared how our AI agents found this flaw and why it took 81 days to go public. Here's a short complementary video that explains it in plain language: what happened, why the old disclosure rules don't fit a world where AI finds bugs in hours, and what that means for anyone defending their systems. Watch it below 👇 and read Matt Suiche's full write-up for the technical deep dive: https://lnkd.in/gYY-ihHA

Running nginx? Upgrade to 1.31.7 or 1.30.6. Then check whether your fleet matched the vulnerable pattern before you patched. A one-byte write, reachable without authentication. Full write-up inside.

One byte. That's all it took to crash parts of nginx, the software running a huge share of the internet. 🚨 Our AI agents found the flaw in July. The fix took four days. The public patch? 81 days. And while it waited, someone else found the same bug. When AI can find a critical vulnerability in hours, a three-month disclosure window is a gift to attackers. Discovery is moving at machine speed. Defense needs to keep up. In Tolmo’s latest blogpost, Matt Suiche breaks down how our agents found it and why the 90-day rule is a relic 👇 https://lnkd.in/gYY-ihHA

Most tools scan from the outside and guess at what's connected. Tolmo's Internal Discovery Agent builds a live graph of your code, cloud, CI, and identities, so when it finds a threat, it already knows every system it touches. No guessing, no tickets lost in translation.

One pentester can't cover your whole stack. A fleet of them can. Tolmo's agents test like an adversary, trace every attack path, and hand your team a fix, not another alert. This is what AI-speed security looks like.