The Remedio Register

Tune in to tune up your endpoint defenses!
Your go-to destination for all things posture management & configuration security…

PHP2Shell: What Teams Need to Know About CVE-2026-109618 and CVE-2026-109619

PHP2Shell: What Teams Need to Know About CVE-2026-109618 and CVE-2026-109619

On October 21, the PHP project released emergency fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, now widely referred to as "PHP2Shell." Both are rated CVSS 9.2 and allow an unauthenticated attacker to run code on a server with a single crafted web request.

Learn more

Topic

Author

A silhouette of a person in a hooded sweatshirt against a background of red computer code, with the text “We’re pulling back the hoodie...” reflecting a Black Basta ransomware investigation.

Black Basta Ransomware: Prevention, Mitigation and Response

Learn how Black Basta ransomware operates, the techniques it uses, and practical steps to prevent attacks through stronger endpoint hardening and configuration security. (Remedio)

Matt Rowe
Matt Rowe
Jul 7, 2024 | 7 min read
An open padlock sits on a computer processor, referencing an OpenSSH vulnerability with the text: “Living without regreSShion regrets.”

OpenSSH Vulnerability: Understanding the regreSSHion Threat

Learn how to defend against RegreSSHion (CVE-2024-6387) using safe hardening techniques that reduce exposure while patches are unavailable or delayed. (Remedio)

Ilan Mintz
Ilan Mintz
Jul 3, 2024 | 8 min read

Want updates?

Capture the noteworthy, cut the noise!

Get Remedio’s monthly endpoint security briefing on emerging risks, hardening strategies, and what’s new in enterprise security.

Subscribe to our newsletter to stay up-to-date and in the loop.

One email a month. Unsubscribe anytime.

Lateral Movement Attacks: Why They’re the Real Cybersecurity Threat

Stopping the initial breach isn't enough. Learn how attackers use lateral movement and how stronger endpoint controls help contain ransomware attacks. (Remedio)

Matt Rowe
Matt Rowe
May 22, 2024 | 6 min read
The Tux Linux penguin mascot centered in front of a glowing blue Linux security shield, with the text “Protect the penguin!” above.

Master Linux Security: Preemptively Find & Fix Misconfigurations

Linux has a reputation for being secure, but reputation doesn’t harden endpoints. As Linux adoption grows across servers, cloud environments, and embedded systems, misconfigurations create real exposure that adversaries are happy to exploit. This article looks at where Linux security breaks down in practice and how teams can reduce that exposure with continuous visibility and safe remediation.

Matt Rowe
Matt Rowe
Mar 14, 2024 | 6 min read
Text reading “Hackers love simple vectors. Are you leaving too many open?” above a laptop screen displaying red digital icons, a reminder of the importance of regular OS patches.

Why Neglecting OS Patches Puts Your Entire Network at Risk

Operating systems are still a key part of your attack surface. This post explains why your patching cycle should account for them more directly.

Tal Kollender
Tal Kollender
Mar 14, 2024 | 6 min read
Illustration of a circular chain loop, captioned 'What it takes to ensure device configuration security'

Device Lifecycle Management: Why Security Can’t End at Deployment

Discover how automated configuration assessment strengthens device security, reduces misconfigurations, accelerates remediation, and simplifies compliance. (Remedio)

Jason Doris
Jason Doris
Feb 21, 2024 | 8 min read
Text reads “Principles & practices for proactive endpoint protection” above an image of a person performing endpoint hardening on a laptop in a server room surrounded by glowing monitors.

Endpoint Hardening: Best Practices for Enterprise Security

Learn endpoint hardening best practices to reduce attack surface, prevent misconfigurations, and continuously protect Windows, Linux, and macOS endpoints. (Remedio)

Tal Kollender
Tal Kollender
Dec 11, 2023 | 8 min read
LockBit 2.0 logo, captioned 'Are you letting LockBit loose with lax security?'

LockBit 2.0 Ransomware: Insights & Counter-Measures

LockBit 2.0 doesn't succeed because organizations lack security tools. It succeeds when the last mile of hardening is left open. Learn how the ransomware operates and the practical counter-measures that close its favorite entry points.

Yakov Kogan
Yakov Kogan
Nov 23, 2023 | 5 min read
Text reading “Dealing with Windows defaults” above a bundle of dynamite sticks with a digital timer, illustrating OS security risks.

Legacy Windows Settings: An OS Security Time Bomb

Some of the riskiest Windows exposures aren't new threats at all. They're legacy settings that survived every upgrade. This post explains how to find and fix them safely.

Tal Kollender
Tal Kollender
Sep 11, 2023 | 7 min read
A stethoscope rests on a laptop keyboard above the text “Cyber hygiene and healthcare security,” highlighting the importance of NHS security.

Hardening NHS Security With Better Device Configuration

For NHS teams, device configuration is a security control, not a background task. Misconfigurations quietly expand risk across clinical environments, while hardened settings contain it. This post breaks down how configuration hygiene strengthens NHS security.

Jamie Byers
Jamie Byers
Sep 5, 2023 | 7 min read

Best Practices in Cybersecurity: Mergers and Acquisitions

Cybersecurity due diligence doesn't end at discovery. In mergers and acquisitions, the real risk often lives in inherited misconfigurations, conflicting policies, and unmanaged endpoints. Learn how to ensure policy compliance across newly combined environments.

Gilad Raz
Gilad Raz
Aug 28, 2023 | 6 min read