As cited
Copy frozen at (site build).
vulnerabilities
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors exploited CVE-2026-109618 and CVE-2026-109619 in PHP2Shell to compromise a European government entity, gaining access to password hashes and multifactor authentication (MFA) credentials within two hours. Attackers are using agentic artificial intelligence (AI) platforms to automate post-exploitation activities as part of a broader global campaign.
Why it matters: Government agencies and organizations running vulnerable PHP2Shell instances face immediate risk of credential theft and account takeover; patches should be prioritized and monitoring for exploitation indicators deployed today.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors exploited CVE-2026-109618 and CVE-2026-109619 in PHP2Shell to compromise a European government entity, gaining access to password hashes and multifactor authentication (MFA) credentials within two hours. Attackers are using agentic artificial intelligence (AI) platforms to automate post-exploitation activities as part of a broader global campaign.
Why it matters: Government agencies and organizations running vulnerable PHP2Shell instances face immediate risk of credential theft and account takeover; patches should be prioritized and monitoring for exploitation indicators deployed today.
- Source published
- First seen by Cybersecurity Tracker