ctrlINT What the industry said about every indicator, with the quote

calif[.]ioDomain

Reported by 2 independent sources · first reported by Tenable · last reported

Last reported 3 days ago

What the reports say

2 reports, newest first · the exact sentence from each

  1. “…trating an exploit chain spread online overnight via researcher Kirill Firsov, who shared it and credited researchers known as LCFR and Calif[.]io.”

    CyberScoopNews
    Prepare yourselves: PHP to release emergency fixes for 2 critical vulnerabilities

  2. “Firsov credited the video and exploit to researcher LCFR and Calif[.]io.”

    TenableVendor
    php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

Indicators reported together

named in the same reports

Also named with it: CVE-2026-109618, CVE-2026-109619, CVE-2024-4577, CVE-2012-1823

Thanks — we review every report.

Report a wrong value
What is wrong with calif[.]io here?
No account needed. We do not store your IP address.