CP SignalTechnology worth your attention.

Friday, 23 October 2026

The Daily Edition: 3 stories, ranked by significance

  1. Security & privacy

    Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

    AWS's threat intelligence team detected exploitation of a PHP remote-code-execution flaw (CVE-2026-109618/109619, dubbed PHP2Shell) in its MadPot honeypot network on October 17, four days before the vulnerability's October 21 public disclosure, with the attempt traced to anonymization infrastructure. Once the embargo lifted, multiple independent actors began exploiting it within hours, and AWS says PHP2Shell is now broadly exploited in the wild with no configuration-only fix available short of patching.

    Read the storyNo. 1 of 3AWS What's NewWed 21 Oct
  2. Software development

    Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents

    A security researcher from Pixee shows that when long-running coding agents compact their context (summarizing and discarding prior conversation), many popular harnesses flatten typed messages into plain text labeled '[User]:', destroying provenance. An attacker who controls any content the agent reads can forge a fake user approval that survives compaction and is later treated as a genuine instruction, succeeding 87-100% of the time in five agents (pi, opencode, Cline, Aider, OpenHands) but 0% in four role-typed agents (Codex, Gemini CLI, Qwen Code, Continue). The laundered approval was shown driving real agents to execute attacker-controlled shell commands and to steer code review away from a planted backdoor. A code-level provenance check mitigates most cases, and the real fix is escap

    No. 2 of 3arXiv cs.CLWed 21 Oct
  3. Artificial intelligence

    LLMs are making formal software verification feasible at a much larger scale

    Anthropic, with formal-verification startup Theorem, used Claude to generate and have machine-checked over 180 million lines of Rocq proof code showing 239 fuzz-test entry points across 123 open-source OSS-Fuzz libraries never crash under memory-safety or assertion checks for inputs under 64MB, under stated assumptions about the execution environment. While building these proofs Claude also found and patched previously undetected bugs. Anthropic is releasing a subset of proofs and semantics, and Theorem will run the pipeline for other projects and is publishing a Claude skill for developers.

    No. 3 of 3Anthropic NewsThu 22 Oct