<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Brandefense</title>
	<atom:link href="https://brandefense.io/feed/" rel="self" type="application/rss+xml" />
	<link>https://brandefense.io</link>
	<description>AI-Driven Threat Intelligence Platform</description>
	<lastBuildDate>Sat, 24 Oct 2026 19:04:48 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
	<item>
		<title>HTTP2Shell: One Brotli Flaw, Many Stacks and Their Fixes</title>
		<link>https://brandefense.io/blog/http2shell-brotli-cve-2026-111497/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 19:04:48 +0000</pubDate>
				<category><![CDATA[Threat Intelligence Researches]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=44013</guid>

					<description><![CDATA[HTTP2Shell is a nickname for CVE-2026-111497, an out-of-bounds write in Google&#8217;s Brotli decoder. It is not a second flaw, and the bug is not in the HTTP/2 protocol. The CVE...]]></description>
		
		
		
			</item>
		<item>
		<title>How to Defend Against PHP2Shell</title>
		<link>https://brandefense.io/blog/how-to-defend-against-php2shell/</link>
		
		<dc:creator><![CDATA[]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 15:16:06 +0000</pubDate>
				<category><![CDATA[Threat Intelligence Researches]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=44006</guid>

					<description><![CDATA[PHP2Shell puts a difficult question in front of defenders: when can an organization say its PHP estate has been remediated? A package update is part of the answer. So are:...]]></description>
		
		
		
			</item>
		<item>
		<title>FortiSIEM 7.5.0 Flaw: Version Table, Port 27918 and Today&#8217;s Checks</title>
		<link>https://brandefense.io/security-news/fortisiem-vulnerability-cve-2026-106173/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 12:30:35 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43964</guid>

					<description><![CDATA[Fortinet says FortiSIEM 7.5.0 has a critical flaw that an unauthenticated attacker may use to run code. The fix is 7.5.1 or above. Until you upgrade, restrict access to tcp...]]></description>
		
		
		
			</item>
		<item>
		<title>How MSSPs Add Threat Intelligence to Their Services: A Rollout Plan</title>
		<link>https://brandefense.io/blog/mssp-threat-intelligence-service/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 12:16:01 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43958</guid>

					<description><![CDATA[Start with the view from outside the client&#8217;s network. Most MSSPs (managed security service providers) already watch endpoints, logs and email. Threat intelligence adds what those tools cannot see: stolen...]]></description>
		
		
		
			</item>
		<item>
		<title>Which Security Products and IT Tools Run on PHP?</title>
		<link>https://brandefense.io/blog/php-applications-in-the-enterprise/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 10:24:04 +0000</pubDate>
				<category><![CDATA[Blog]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43953</guid>

					<description><![CDATA[Yes, many tools your security and IT teams run are PHP applications. MISP, the threat sharing platform, is one, and Passbolt, a password manager, is another. So are GLPI, Zabbix,...]]></description>
		
		
		
			</item>
		<item>
		<title>Operation Serengeti III: How INTERPOL&#8217;s Latest Sweep Compares With the Last Two</title>
		<link>https://brandefense.io/security-news/operation-serengeti-iii-interpol-arrests/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Sat, 24 Oct 2026 04:41:32 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43948</guid>

					<description><![CDATA[INTERPOL says Operation Serengeti III led to 1,462 arrests across 21 countries and the disruption of 10,909 malicious networks. The operation ran from 29 June to 31 August 2026, and...]]></description>
		
		
		
			</item>
		<item>
		<title>Laravel Authentication Bypass: A Two-Line Fix in August, the Advisory in October</title>
		<link>https://brandefense.io/security-news/laravel-tokenguard-authentication-bypass-cve-2026-114509/</link>
		
		<dc:creator><![CDATA[]]></dc:creator>
		<pubDate>Fri, 23 Oct 2026 23:32:38 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43942</guid>

					<description><![CDATA[Laravel&#8217;s built-in TokenGuard can be fooled into signing in a request as another user. The advisory, GHSA-f9x3-7vq9-cph6 (CVE-2026-114509), calls it critical and gives it a CVSS 4.0 score of 9.2....]]></description>
		
		
		
			</item>
		<item>
		<title>PHP2Shell Across Palo Alto Products: Status and Hotfix Dates</title>
		<link>https://brandefense.io/security-news/palo-alto-php2shell-product-status-hotfix-dates/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Fri, 23 Oct 2026 20:57:25 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43932</guid>

					<description><![CDATA[Palo Alto Networks lists PAN-OS and Panorama as affected by the PHP2Shell flaws, through the management web interface. Most of its other products are not affected. The hotfixes are not...]]></description>
		
		
		
			</item>
		<item>
		<title>Nextcloud Collabora CODE Server Flaw: The Five-Step Playbook (CVE-2026-110447)</title>
		<link>https://brandefense.io/security-news/nextcloud-collabora-code-server-rce-cve-2026-110447/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Fri, 23 Oct 2026 20:56:46 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43928</guid>

					<description><![CDATA[CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities (KEV) catalog on 23 October 2026. The flaw sits in the Built-in CODE Server app for Nextcloud, also called richdocumentscode. A request...]]></description>
		
		
		
			</item>
		<item>
		<title>PHP Warns of a New RCE Path in Session Upload Progress (CVE-2026-115560)</title>
		<link>https://brandefense.io/security-news/php-cve-2026-115560-session-upload-progress-rce/</link>
		
		<dc:creator><![CDATA[Brandefense Research Team]]></dc:creator>
		<pubDate>Fri, 23 Oct 2026 19:11:16 +0000</pubDate>
				<category><![CDATA[Security News]]></category>
		<guid isPermaLink="false">https://brandefense.io/?p=43922</guid>

					<description><![CDATA[PHP has warned of a remote code execution path in session upload progress that has no patch yet. It is tracked as CVE-2026-115560. PHP posted an informational advisory on 23...]]></description>
		
		
		
			</item>
	</channel>
</rss>
