#PHP2Shell
LightNews LightNews
tuttigachimuchi.bsky.social
php2shell, my beloved
pedroscomparin.bsky.social PsicoPapi @pedroscomparin.bsky.social · 2d
Parece que vazou UMA CARALHADA de dados do PL agorinha
October 25, 2026 at 11:42 PM
ptr.bsky.social
uk.wikipedia.org/wiki/PHP2Shell
PHP2Shell — Вікіпедія
uk.wikipedia.org
October 26, 2026 at 6:21 PM
theregister.com
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours
www.theregister.com
October 26, 2026 at 4:15 PM
queencomplex.bsky.social
QUEENCOMPLEX (dot) net is back up after all the PHP2Shell trouble.

However, as a positive consequence, the site once again can display these 360 Panoramas.
October 27, 2026 at 7:44 PM
bleepingcomputer.com
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
www.bleepingcomputer.com
October 26, 2026 at 9:20 AM
markwaid.bsky.social
Great news re: Mike's Amazing World. Heard from the admin, who confirmed that it's just down temporarily to repair the widespread php2shell bug and will be active again shortly!
October 28, 2026 at 12:27 AM
infosec.skyfleet.blue
PHP2Shell security flaws now sucessfully exploited in the wild
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
www.bleepingcomputer.com
October 26, 2026 at 9:58 AM
lotta-kaa.eurosky.social
‼️ 82 PROZENT UNGEPATCHT
Über 34 Millionen Systeme noch anfällig für PHP2Shell
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
82 Prozent ungepatcht: Über 34 Millionen Systeme noch anfällig für PHP2Shell - Golem.de
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
glm.io
October 24, 2026 at 8:43 PM
bleepingcomputer.com
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
www.bleepingcomputer.com
October 27, 2026 at 8:21 AM
ericjgeller.com
PHP2Shell exposure data from Censys: php2shell.censys.com
October 23, 2026 at 5:02 PM
theregister.com
CISA confirms PHP2Shell under attack as researchers clock successful exploits
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
www.theregister.com
October 27, 2026 at 2:47 PM
k8em0.bsky.social
PHP2Shell had everyone buzzing last week, but the multiparty vulnerability disclosure felt all too familiar. Dan Kaminsky's DNS bug was the first attempt at such large scale coordination and we should expect more like this from AI-assisted research

www.lutasecurity.com/post/php2she...
PHP2Shell: Multiparty Coordinated Vulnerability Disclosure
Last week's PHP2Shell bugs and disclosure had the same familiar ingredients of Dan Kaminsky's DNS bug, but with AI sprinkles on top. Multiparty Coordinated Vulnerability Disclosure (CVD) can be comple...
www.lutasecurity.com
October 27, 2026 at 4:52 PM
theregister.com
PHP2Shell is a warning shot for vulnerability disclosure
PHP2Shell is a warning shot for vulnerability disclosure
Keeping secrets is difficult in an open world, but we've done it before and must do it again
www.theregister.com
October 26, 2026 at 9:40 AM
socket.dev
PHP2Shell exploits are a massive fail (so far)
October 23, 2026 at 6:21 PM
theregister.com
There's a third PHP2Shell bug, but it won't get an emergency fix
There's a third PHP2Shell bug, but it won't get an emergency fix
Bad things (and software bugs?) come in threes
www.theregister.com
October 23, 2026 at 8:09 PM
uesp.net
You can learn more here: en.wikipedia.org/wiki/PHP2Shell
PHP2Shell - Wikipedia
en.wikipedia.org
October 21, 2026 at 11:25 PM
furaffinity.net
Status Page for Maintenance: status.furaffinity.net/maintenance/3/
Final Patching Maintenance Window (php2shell) · Fur Affinity
Service availability and updates for Fur Affinity.
status.furaffinity.net
October 24, 2026 at 2:34 AM
heise.de
Hier ein paar zuletzt häufig geteilte #News:

php2shell: Millionen PHP-Dienste in Deutschland verwundbar

Passwortmanager ohne Cloud-Zwang: Update für KeePassXC

AfD-Leak: Mutmaßliche Täter bekennen sich

#verpassky
php2shell: Millionen PHP-Dienste in Deutschland verwundbar
Die IT-Sicherheitsfirma Censys scannt PHP-Server auf für php2shell anfällige Versionen. Millionen in Deutschland sind noch verwundbar.
www.heise.de
October 24, 2026 at 7:15 AM
cooperq.com
It's probably not good that 33 million websites are still vulnerable to PHP2Shell php2shell.censys.com
PHP2Shell services
php2shell.censys.com
October 23, 2026 at 8:42 PM
demon81.bsky.social
Hinweis zur php/php2shell Sicherheitslücke:

FRITZ! Produkte sind von CVE-2026-109618 und CVE-2026-109619 (php2shell) nicht betroffen.
October 22, 2026 at 11:21 AM
infosec.skyfleet.blue
Pierluigi Paganini answers questions about the PHP2Shell flaws
Pierluigi Paganini answers questions about the PHP2Shell flaws
Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks.
securityaffairs.com
October 24, 2026 at 7:37 PM
infosec.skyfleet.blue
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers exploit PHP2Shell flaws to attack university and business websites, using public code to execute commands on unpatched servers.
cybersecuritynews.com
October 26, 2026 at 9:02 PM
doninside.com
Ukrainian PHP2shell hits so hard
October 23, 2026 at 7:25 AM
infosec.skyfleet.blue
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
www.bleepingcomputer.com
October 27, 2026 at 9:02 AM
martinsteiger.ch
David Burkardt, CEO von #Cyon, erklärt, wieso der Hoster über 100'000 Website mit #PHP offline nehmen musste:

www.cyon.ch/blog/php2she...

#hosting #php2shell
PHP2Shell: Warum wir über 100'000 Websites vom Netz genommen haben
Wegen der PHP-Lücken PHP2Shell nahm cyon am 21. Oktober über 100'000 Websites vom Netz. CEO David Burkardt erklärt, warum.
www.cyon.ch
October 25, 2026 at 10:00 AM