https://sirenbow.com Reproducible security research — methodologies, vulnerability analyses, and field reports. en https://sirenbow.com/research/php2shell-cve-2026-109618-109619 https://sirenbow.com/research/php2shell-cve-2026-109618-109619 Wed, 21 Oct 2026 00:00:00 GMT An anonymized customer finding through SIRENBOW's security API provides the context for an analysis of CVE-2026-109618 and CVE-2026-109619: their origins, attack paths, and remediation. https://sirenbow.com/research/verus-missing-check https://sirenbow.com/research/verus-missing-check Thu, 23 Jul 2026 00:00:00 GMT The Verus↔Ethereum bridge was drained for a second time. The attacker spent 0 ETH on the Ethereum side and forged a single cross-chain import. The root cause is one line that was never written: the bridge checked that the data was intact, but never that the withdrawal was backed by equal value.