> TritonInfoSec News
Home / Oct 26, 2026 / Story
1
#1 The Hacker News general October 25, 2026 at 17:19 UTC

PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking

By [email protected] (The Hacker News)

AI Summary

Threat actors exploiting PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have deployed agentic AI platforms for post-exploitation, compromising a European government entity within two hours of initial access to extract password hashes and MFA data. The use of AI-assisted post-exploitation marks a significant escalation in attacker sophistication that security teams need to account for in detection and response playbooks.

Read full article → https://thehackernews.com/2026/10/php2shell-exploi…

Relevance score: 92.0/100

# More from October 26

  1. 2
    PHP2Shell security flaws now sucessfully exploited in the wild BleepingComputer
  2. 3
    Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations The Hacker News
  3. 4
    BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot BleepingComputer
  4. 5
    Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages SecurityWeek
  5. 6
    Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs The Hacker News
  6. 7
    Popular AI tool LiteLLM says unrevoked key allowed hackers to target users The Record
  7. 8
    Bias in Qwen3-Coder Model Schneier on Security
  8. 9
    Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware The Hacker News
  9. 10
    Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers The Hacker News