Request Pricing Information
Please complete the form below to help us understand your needs and prepare the right pricing proposal.
Thank you.
Your pricing request has been submitted. Our team will review your requirements and follow up with a tailored proposal.
Latest research & product updates
Node2Shell: remote code execution on stock Node.js builds (CVE-2026-111497)
A checker calling itself node2shell-check is already mapping which hosts decompress Brotli. CVE-2026-111497 turns a malformed Brotli body into a shell on an official, unmodified Node.js build, which ELLIO reproduced on x86-64 against four targets.
PHP2Shell: attacks before the patch, and automation by nightfall
PHP2Shell is a pair of critical, unauthenticated RCE flaws in PHP core (CVE-2026-109618 and CVE-2026-109619), fixed on 21 October 2026. What the two bugs are, what to patch, and what the ELLIO Deception Network recorded on disclosure day, including what the attack tooling actually carried.