Chainguard

Reported Context (3)

targeting its sensors was observed on October 21, 2026, at 8:36 a.m. UTC, less than an hour after "Chainguard unilaterally broke the embargo and published built images containing the fix." PHP2Shell Flaws Exploited Before Public Disclosure, Amazon Says
The foundation additionally fingered supply-chain security firm Chainguard for pushing fixes six hours before the rescheduled, coordinated vulnerability disclosure time Wednesday. PHP Disclosure Leaks Exposed Two Critical Remote-Code-Execution Flaws
**Organization:** Chainguard Chainguard Report Finds 97% of Observed Vulnerability Instances Outside Top 20 Projects

CVE (2)

People (4)

MITRE ATT&CK (3)

Vendors (8)

Products (8)

Tools (1)

Industries (3)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.