Enterprise
Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Suspected Chinese attackers used a custom PHP2Shell exploit to root 25 servers, including US government-affiliated firewalls.
Topic
#Php2Shell
Stories tagged by our AI curator.
Enterprise
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
CISA has issued a warning regarding a high-severity Linux kernel flaw being used in conjunction with PHP2Shell attacks.
Enterprise
InfraTrust report warns of exploited flaws in critical network infrastructure
Security report warns of active exploitation of PHP vulnerabilities in firewall and network appliance management interfaces.
Enterprise
Even after PHP2Shell, blast radius matters more than a CVSS score
Security analysis explains how limiting service account access reduces breach damage more than patching alone, using PHP2Shell vulnerability as case study.
Enterprise
“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response
Security researchers report that PHP2Shell vulnerability patching is moving too slowly despite critical severity, with 93.6% of systems still exposed five days after disclosure.
Enterprise
CISA confirms PHP2Shell under attack as researchers clock successful exploits
CISA has confirmed active exploitation of two critical PHP2Shell vulnerabilities and set an October 29 deadline for federal agencies to patch the bugs rated 9.2 on the CVSS scale.
Enterprise
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA has confirmed PHP2Shell vulnerabilities are actively exploited and mandated federal agencies patch systems by Thursday.
Enterprise
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
UK pentester 'Killa' won a $2,000 Bitcoin prize by successfully exploiting PHP2Shell vulnerabilities in a capture-the-flag challenge launched to validate the exploit's actual difficulty.
Enterprise
Experts reveal another major PHP2Shell bug — and it's not getting an emergency patch this time
Security experts discovered another critical PHP2Shell vulnerability with no emergency patch planned.
Enterprise
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical remote code execution vulnerabilities tracked as PHP2Shell are now being actively exploited in the wild, posing immediate risk to affected systems.
Enterprise
PHP2Shell: Who Is At Risk And How Can Businesses Stay Safe?
Critical vulnerabilities in PHP itself called PHP2Shell allow unauthenticated attackers to execute code on vulnerable servers; fixes were released October 21, 2026.
Enterprise
PHP2Shell: Security vendors race to contain a critical vulnerability as exploitation attempts spread
Security vendors including Palo Alto Networks, Check Point, and Cloudflare are responding to active exploitation of a critical PHP2Shell vulnerability, with reports of AI-assisted post-exploitation activity and regional attack attempts.
Enterprise
PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions
Critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were exploited by attackers four days before patches were released, with exploit attempts reaching millions according to Cloudflare observations.
Also covered by 1 other outlet
Enterprise
PHP2Shell exploit bypasses protections designed to stop remote code execution
Researchers have developed an exploit for PHP2Shell that bypasses ASLR protections on x86-64 servers, representing a significant advance as threat actors increasingly use AI to discover new attack methods.
Enterprise
PHP2Shell puts dozens of UK government services out of service
Two critical PHP vulnerabilities have forced 32 UK government services offline and partially disabled four others, with similar disruptions affecting government websites across Europe and Australia.
Enterprise
PHP’s security scramble is just a preview: AI is digging up flaws faster than maintainers can fix them
Critical PHP vulnerabilities (PHP2Shell) have forced websites and government agencies offline, and the incident reveals how AI is accelerating the discovery of security flaws faster than maintainers can patch them.
Enterprise
Millions of PHP2Shell attempts so far, but officials see no break-in
Hackers have made millions of exploitation attempts targeting the PHP2Shell vulnerability since its public disclosure, though officials in multiple countries report no confirmed breaches.
Enterprise
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Attackers are exploiting critical PHP2Shell vulnerabilities in massive numbers, with millions of attempts recorded since disclosure, and evidence suggesting attacks began before public announcement.