PHP2Shell

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress 2026-10-30 at 17:09 By Ionut Arghire Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress appeared first on SecurityWeek. This article […]

PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress Read More »

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls 2026-10-29 at 18:25 By Zeljka Zorz China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed that […]

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls Read More »

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Exploit PHP2Shell to Root Firewalls Read More »

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Industrial Vendors Check Products for PHP2Shell Vulnerabilities 2026-10-26 at 16:52 By Eduard Kovacs Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Industrial Vendors Check Products for PHP2Shell Vulnerabilities Read More »

PHP2Shell Exploitation Moves From Probes to Working Shells 

PHP2Shell Exploitation Moves From Probes to Working Shells  2026-10-26 at 15:30 By Eduard Kovacs Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

PHP2Shell Exploitation Moves From Probes to Working Shells  Read More »

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge 2026-10-23 at 15:45 By Eduard Kovacs Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek. […]

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge Read More »

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Tech and Security Companies Respond to PHP2Shell Vulnerabilities 2026-10-22 at 15:20 By Eduard Kovacs Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Tech and Security Companies Respond to PHP2Shell Vulnerabilities Read More »

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »

PHP2Shell Exploitation Started Days Before Patches

PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Exploitation Started Days Before Patches Read More »

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »

Scroll to Top