Advertisement

HIGH
Threat Intel
Cookie-Controlled PHP Web Shells Evade Detection on Linux Servers
Microsoft researchers warn of stealthy PHP web shells on Linux using HTTP cookies for command execution and cron jobs for long-term persistence.
Runtime Rebel Intel
3 min read·Apr 4, 2026
TH
HIGH
Threat Intel
Hypervisor-Based Persistence: Abusing Virtual Machines for Stealth
Analysis of how threat actors leverage virtualization platforms to host malicious guest OSs, bypassing host-level EDR and maintaining persistent access.
Runtime Rebel Intel
4 min read·Feb 26, 2026