Predicta Lab

Official account of Predicta Lab. Leveraging intelligence since 2020. Contact us at [email protected]

Our articles 👉

[Predicta Lab @PredictaLabOff]

Who in your threat model handles data that can move a stock by 20 percent: the lab, the journal, the conference, or the PR agency?

Follow @PredictaLabOff for more cyber and OSINT news.

[Predicta Lab @PredictaLabOff]

Moderna lost about 24 billion dollars in market value in a day. Not after a hack: after its own trial results appeared online two days before the embargo lifted. ⬇️

[Predicta Lab @PredictaLabOff]

The takeaway: embargoed science is market-moving information with none of the protections of insider data. It flows through conference platforms, journals and partner portals, and every stop is a potential leak point.

[Predicta Lab @PredictaLabOff]

What broke first here: the code, the volunteer governance, or the embargo?

Follow @PredictaLabOff for more cyber and OSINT news.

[Predicta Lab @PredictaLabOff]

The uncomfortable timeline: an external audit flagged one of the bugs in 2024. The volunteer security team, bound by consensus and afraid of breaking the ecosystem, stalled for two years. AI code reviews in August forced it to the top of the pile.

[Predicta Lab @PredictaLabOff]

AI is now finding bugs in the web's foundations faster than coordinated disclosure can handle. 758,000 internet-facing PHP hosts run versions that will never get this patch. The long tail starts now.

[Predicta Lab @PredictaLabOff]

France pulled tax, weather and prefecture portals. The Netherlands took down DigiD and https://t.co/OSn9yOyMzV. Denmark and Finland followed. Not breaches: precautions, while emergency patches rolled out.

[Predicta Lab @PredictaLabOff]

The NSA's advice to every org running PHP this week: install the emergency update now, or take your systems offline until you can. Four governments chose offline. ⬇️

[Predicta Lab @PredictaLabOff]

PHP2Shell: CVE-2026-109618 and CVE-2026-109619, CVSS 9.2, in core components of the engine running roughly 70% of the web. Unauthenticated remote code execution and memory disclosure, proven against WordPress, Drupal and Joomla.

[Predicta Lab @PredictaLabOff]

What breaks first in your threat model when intrusion attempts become effectively free?

Follow @PredictaLabOff for more cyber and OSINT news.

[Predicta Lab @PredictaLabOff]

One hacker breached more than 100 companies in under a month. The toolkit: AI agents and roughly 5,000 dollars in tokens. Researchers watched it happen live, through the attacker's own dashboards. ⬇️

[Predicta Lab @PredictaLabOff]

When an intrusion costs 50 dollars and needs one short prompt, attacker numbers stop being limited by skill. Defenders should assume patient, automated adversaries probing everything, all the time.