Skip to content

Author

Basilisk OffSec

4 publications

Stolen UpdraftCentral keys and the incident chain

Stolen UpdraftCentral keys and the incident chain

Stolen UpdraftCentral keys arrived with leaked remote management credentials on October 17 and 18, 2026. Separate vendor facts, the chain, and containment.

By Basilisk OffSec

Read →
SafePay ransomware: AA26-293A for red team use

SafePay ransomware: AA26-293A for red team use

SafePay ransomware: the October 20, 2026 AA26-293A alert covers about 600 victims, ATT&CK TTPs, and mitigations for authorized defensive drills.

By Basilisk OffSec

Read →
php2shell red team attack surface and detection

php2shell red team attack surface and detection

php2shell pairs CVE-2026-109618 and CVE-2026-109619. A technical guide to attack surface, authorized pentest, and detection for red teams.

By Basilisk OffSec

Read →
Node.js Brotli RCE and red team detection (2026)

Node.js Brotli RCE and red team detection (2026)

Node.js Brotli RCE is the HIGH Brotli decoder flaw in the October 21, 2026 security release. See surface, inventory, and detection signals.

By Basilisk OffSec

Read →