Cogent Security named to Fortune Cyber 60 for a second year, citing PHP2Shell response gaps
Cogent Security, an applied AI cybersecurity company, was named to the Fortune Cyber 60 for the second consecutive year. The list is built by Fortune with Lightspeed Venture Partners and AWS. The vendor-issued press release uses the PHP2Shell vulnerability to argue that enterprise patching is too slow. Per Cogent, PHP2Shell was disclosed on October 21 and involved two critical flaws that had sat in PHP for more than a decade. AI-assisted research reportedly produced working exploits in about a week, and attacks began before a patch existed. Cloudflare reportedly recorded millions of exploitation attempts that day. Cogent says the average Fortune 500 company had patched fewer than 1% of its 2,266 affected assets by 5 p.m. Pacific. The article is mainly promotional and gives no CVE identifiers or technical exploit details.
Detalhes técnicos
- Cogent cites Google's M-Trends 2026 mean time to exploit of negative seven days, meaning exploitation often begins before a fix exists.
- Cogent says its Zero Day Response mapped vulnerable assets in about five minutes on average. It narrowed 2,266 affected assets to 16 that had PHP loaded at runtime, were internet-facing and supported critical business functions.
- The company also cites an Anthropic-disrupted state-sponsored campaign in which AI agents performed 80-90% of the tactical work.
- Cogent's product is an autonomous vulnerability management platform with its own VR-1 model and a Context Engine. Its agents act inside customer-defined autonomy zones, and other changes go to a person for approval.
Remediação
- The article offers no PHP-specific patch guidance.
- Its general advice is to keep a live software inventory, prioritize by runtime presence, internet exposure and business criticality, and verify fixes with a rescan.
- Cogent also argues for shortening the time between disclosure and a verified fix.
Linha do tempo
-
Cogent Security named to Fortune Cyber 60 for a second year, citing PHP2Shell response gaps
ler a análise desta fonte ocultar
Cogent Security, an applied AI cybersecurity company, was named to the Fortune Cyber 60 for the second consecutive year. The list is built by Fortune with Lightspeed Venture Partners and AWS. The vendor-issued press release uses the PHP2Shell vulnerability to argue that enterprise patching is too slow. Per Cogent, PHP2Shell was disclosed on October 21 and involved two critical flaws that had sat in PHP for more than a decade. AI-assisted research reportedly produced working exploits in about a week, and attacks began before a patch existed. Cloudflare reportedly recorded millions of exploitation attempts that day. Cogent says the average Fortune 500 company had patched fewer than 1% of its 2,266 affected assets by 5 p.m. Pacific. The article is mainly promotional and gives no CVE identifiers or technical exploit details.
Technical Details
- Cogent cites Google's M-Trends 2026 mean time to exploit of negative seven days, meaning exploitation often begins before a fix exists.
- Cogent says its Zero Day Response mapped vulnerable assets in about five minutes on average. It narrowed 2,266 affected assets to 16 that had PHP loaded at runtime, were internet-facing and supported critical business functions.
- The company also cites an Anthropic-disrupted state-sponsored campaign in which AI agents performed 80-90% of the tactical work.
- Cogent's product is an autonomous vulnerability management platform with its own VR-1 model and a Context Engine. Its agents act inside customer-defined autonomy zones, and other changes go to a person for approval.
Remediation
- The article offers no PHP-specific patch guidance.
- Its general advice is to keep a live software inventory, prioritize by runtime presence, internet exposure and business criticality, and verify fixes with a rescan.
- Cogent also argues for shortening the time between disclosure and a verified fix.