Blog - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Blog

Threat Research CVE-2026-115806: Prime Mover PHP Object Injection Leads to Privilege Escalation 1. Introduction CVE-2026-115806 is a PHP object-injection flaw in Prime Mover – Backup and Migration for WordPress. An unauthenticated visitor can store a base64-encoded serialized object in a… SAFE Safe Security Oct 29, 2026 9 min read
Blog The Top 10 Enterprise TPRM Platforms in 2026 Third parties now show up in almost half of all breaches. Verizon’s 2026 Data Breach Investigations Report puts the share at 48%, up 60% in a single year.… Rahul Tyagi Safe Security Oct 29, 2026 9 min read
CTEM One Vendor Breach, Five Victims: Why Exposure Management and TPRM Are Now the Same Problem Here’s the number from this year I can’t stop thinking about: every vendor breach in 2025 hit an average of 5.28 downstream organizations. That’s the highest figure on… Jacqueline Lebo Safe Security Oct 27, 2026 5 min read
Threat Research CVE-2026-111497: Inside Node2Shell and the Brotli Decoder Flaw By SAFE Threat Research Team A vulnerability first surfaced through Node.js has exposed a much broader attack surface in one of the web ecosystem’s most widely embedded compression… SAFE Safe Security Oct 26, 2026 11 min read
Threat Research CVE-2026-54293 NLTK: URL-Encoded Path Traversal in nltk.data.load() 1. Introduction This article examines a path-traversal flaw in nltk.data.load() in NLTK 3.9.4 and earlier, tracked as CVE-2026-54293 with a CVSS v3.1 score of 7.5 (High) and fixed… SAFE Safe Security Oct 24, 2026 16 min read
Threat Research This Week in CVEs: The Week Defenders Lost the Head Start By SAFE Threat Research Team This week, the normal vulnerability lifecycle broke down. PHP2Shell set the tone for the week. CVE-2026-109618 and CVE-2026-109619, two critical unauthenticated RCEs in… SAFE Safe Security Oct 23, 2026 7 min read
Threat Research CVE-2026-109618 and CVE-2026-109619 PHP2Shell: Critical PHP Flaws Explained and What Organizations Must Do to Mitigate Risk 1. Introduction This article examines two related memory-safety vulnerabilities in the PHP engine, CVE-2026-109618 and CVE-2026-109619. In our reproduced mod_php chain, multipart HTTP requests combine an out-of-memory trigger… SAFE Safe Security Oct 22, 2026 16 min read
News SAFE ranks highest in product execution and strategy in Liminal’s 2026 Cyber TPRM Index SAFE has been named a Leader in Liminal’s 2026 Cybersecurity Third-Party Risk Management (TPRM) Link Index™ for the second consecutive year. This year, SAFE sits at the far… SAFE Safe Security Oct 21, 2026 3 min read
Threat Research CVE-2026-44381 MISP Threat Intelligence Platform Authenticated SQL Injection via ORDER BY Parameter POST /events/index — Boolean-Blind + Time-Based Oracle 1. Introduction This document illustrates a SQL injection vulnerability in MISP — the Malware Information Sharing Platform and Threat Sharing system — an open-source threat intelligence platform used… SAFE Safe Security Oct 21, 2026 9 min read
Events Governing AI at Gartner UK: Only 5% Say They’re Ready. Here’s Where to Start. During one AI governance session at the Gartner Security & Risk Management Summit in London, a well-known authority in the GRC world shared a number that stopped the… Jacqueline Lebo Safe Security Oct 20, 2026 5 min read
Threat Research One Person, Five AI Tools, a Country’s Banks: Inside South Korea’s AI-Run Breach A financially motivated hacker used a stack of AI tools to hit South Korean banks at the speed of a whole team. The tooling was new. The way… Rahul Tyagi Safe Security Oct 20, 2026 9 min read
Threat Research CVE-2026-101894: Symlink-Chain Path Traversal in @xhmikosr/decompress 1. Introduction The @xhmikosr/decompress package extracts tar, tar.gz, tar.bz2, and ZIP archives in Node.js applications. CVE-2026-101894 is a symlink-chain path traversal in its default decompress(input, output) API: crafted… SAFE Safe Security Oct 20, 2026 10 min read