PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor
Check whether your data has leaked
- Have I Been Pwned: check for free whether your email address is in past breaches (the FBI also contributes leaked passwords)
- Google Password Checkup: checks passwords saved in Google for leaks, reuse and weakness, and suggests changes
| CVE | CVE-2026-109618 CVE-2026-109619 |
|---|---|
| Source | The Hacker News |
| Fetched | 10/26/2026, 03:27 AM |
| Data | Markdown JSON |
On 10/26/2026, 02:19 AM, The Hacker News published "PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking" (type: Security news). Related technologies: PHP. CVE: CVE-2026-109618, CVE-2026-109619.