Skip to content

Advisory: PHP2Shell: the critical PHP vulnerability and how to patch itRead more

Topic

Application security

Application security: code review, web application and API testing, and fixing what testing finds.

Released 24 Oct 2026Company news
Fox Valuations’ Den release: an assistant that creates clients and jobs
Released 23 Oct 2026Company news
Stone Leaf Capital portal release: a CAR representative area, board minutes and named regulator owners
Critical severity
22 Oct 2026Advisories
PHP2Shell: the critical PHP vulnerability and how to patch it
Live 20 Oct 2026Company news
Bold Property Group AML/CTF program live, with daily DFAT and FATF screening built in-house
Released 14 Oct 2026Company news
Black Shard Labs ships live 3D track rendering in SENTINEL
High severity
Patch Tuesday 13 Oct 2026Advisories
Microsoft October 2026 Patch Tuesday: exploited Windows Shell flaw and two public zero-days

Released 9 Oct 2026Company news
Black Shard releases The Edge, a brand film made in-house
Guides
Guardrails and audit trails before an AI feature ships
Guides
What prompt injection testing actually finds
Guides
What an AI security assessment checks
Named 7 Sep 2026Company news
blackshard.com.au named an Awwwards Nominee
Guides
Penetration testing cost in Australia, and how to get a quote
Guides
Case study: Xero as the bank truth behind a fund licensee's ledger
Guides
RBAC vs ABAC, and where the permission check belongs
Guides
Shipping AI-written code without shipping its mistakes
Guides
An audit ledger nobody can quietly edit
Guides
A content-security policy that blocks something
Guides
Tenant isolation that survives a bad query
Guides
What an API penetration test finds that a web application test misses
Guides
What a human reviewer catches that a scanner misses
Guides
What a web application firewall cannot do
Guides
The Privacy Act for software teams
Guides
The API key you shipped to every customer
Guides
Shifting security left without slowing delivery down
Guides
What a mobile app penetration test covers
Guides
How to security test an LLM feature already in production
Guides
Broken object level authorization: IDOR in real apps
Guides
Secrets management past the .env file
Guides
What an enterprise buyer means when the contract says SAML single sign-on
Guides
Threat modelling without the theatre: a working method
Guides
Reviewing AI-generated code before it ships
Guides
Supply chain risk in your dependencies

All categories

Advisories
Patch and mitigation notices, each with a severity, its identifiers and one action.
Latest 25 Oct 2026
Threat intelligence
Incidents, campaigns and the monthly exploited-vulnerability roundups.
Latest 25 Oct 2026
Research
Data briefs and analysis drawn from primary statistics.
Latest 25 Oct 2026
Policy and regulation
ASD, Home Affairs, the OAIC, the Privacy Act and the Cyber Security Act.
Latest 25 Oct 2026
Company news
Products, arrangements, certificates and client releases from Black Shard.
Latest 25 Oct 2026
Guides
Reference guides and technical write-ups from our own engagements.
Latest 6 Oct 2026

Want this applied to your systems?

Tell us what you run and what you need checked.

Talk to us Call 1800 370 270