PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor
检查你的信息是否已泄露
- Have I Been Pwned：免费查询你的邮箱地址是否出现在过去的泄露数据中（FBI 也提供泄露的密码）
- Google 密码检查：检查保存在 Google 中的密码是否泄露、重复使用或强度不足，并建议更改
| CVE | CVE-2026-109618 CVE-2026-109619 |
|---|---|
| 来源 | The Hacker News |
| 获取时间 | 2026/10/26 03:27 |
| 数据 | Markdown JSON |
2026/10/26 02:19，The Hacker News 发布了“PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking”（类型：安全新闻）。相关技术：PHP。CVE：CVE-2026-109618、CVE-2026-109619。