Featured Building “php2shell” detections before coordinated disclosure We built Zeek and Suricata detections for php2shell, two serious remote code execution vulnerabilities in PHP, and released them as open source. Ben Reardon : Corelight Labs, Lead Security Researcher Oct 21, 2026
Zeek PrintNightmare, SMB3 encryption, and your network CVE-2021-1675 is a vulnerability that targets the Windows Print Spooler service. Find out more about detecting the PrintNightmare vulnerability here. Corelight Labs Team Jul 7, 2021