php2shell, my beloved
October 25, 2026 at 11:42 PM
php2shell, my beloved
QUEENCOMPLEX (dot) net is back up after all the PHP2Shell trouble.
However, as a positive consequence, the site once again can display these 360 Panoramas.
However, as a positive consequence, the site once again can display these 360 Panoramas.
October 27, 2026 at 7:44 PM
QUEENCOMPLEX (dot) net is back up after all the PHP2Shell trouble.
However, as a positive consequence, the site once again can display these 360 Panoramas.
However, as a positive consequence, the site once again can display these 360 Panoramas.
PHP2Shell — Вікіпедія
uk.wikipedia.org
October 26, 2026 at 6:21 PM
Firewalls unter Beschuss:
Server der US-Regierung mittels PHP2Shell infiltriert
www.golem.de/news/firewal...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Firewall #Server #US #PHP2Shell
Server der US-Regierung mittels PHP2Shell infiltriert
www.golem.de/news/firewal...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Firewall #Server #US #PHP2Shell
Firewalls unter Beschuss: Server der US-Regierung mittels PHP2Shell infiltriert - Golem.de
Chinesische Hacker sollen das Internet nach anfälligen Firewalls abgesucht und einige davon infiltriert haben - darunter solche der US-Regierung.
www.golem.de
October 28, 2026 at 10:00 PM
Firewalls unter Beschuss:
Server der US-Regierung mittels PHP2Shell infiltriert
www.golem.de/news/firewal...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Firewall #Server #US #PHP2Shell
Server der US-Regierung mittels PHP2Shell infiltriert
www.golem.de/news/firewal...
#Linux #LinuxNews #LinuxDE #LinuxNewsDE #EULE #EULEde #Firewall #Server #US #PHP2Shell
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours
www.theregister.com
October 26, 2026 at 4:15 PM
UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest
Great news re: Mike's Amazing World. Heard from the admin, who confirmed that it's just down temporarily to repair the widespread php2shell bug and will be active again shortly!
October 28, 2026 at 12:27 AM
Great news re: Mike's Amazing World. Heard from the admin, who confirmed that it's just down temporarily to repair the widespread php2shell bug and will be active again shortly!
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
www.bleepingcomputer.com
October 26, 2026 at 9:20 AM
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
GreyNoise is monitoring exploitation attempts against #php2shell (CVE-2026-109618 and CVE-2026-109619).
On 28 Oct 2026 we observed the first successful exploitation of php2shell against a vulnerable GreyNoise sensor.
This live activity report is derived from GreyNoise data: php.events.greynoise.io
On 28 Oct 2026 we observed the first successful exploitation of php2shell against a vulnerable GreyNoise sensor.
This live activity report is derived from GreyNoise data: php.events.greynoise.io
October 28, 2026 at 6:50 PM
GreyNoise is monitoring exploitation attempts against #php2shell (CVE-2026-109618 and CVE-2026-109619).
On 28 Oct 2026 we observed the first successful exploitation of php2shell against a vulnerable GreyNoise sensor.
This live activity report is derived from GreyNoise data: php.events.greynoise.io
On 28 Oct 2026 we observed the first successful exploitation of php2shell against a vulnerable GreyNoise sensor.
This live activity report is derived from GreyNoise data: php.events.greynoise.io
PHP2Shell had everyone buzzing last week, but the multiparty vulnerability disclosure felt all too familiar. Dan Kaminsky's DNS bug was the first attempt at such large scale coordination and we should expect more like this from AI-assisted research
www.lutasecurity.com/post/php2she...
www.lutasecurity.com/post/php2she...
PHP2Shell: Multiparty Coordinated Vulnerability Disclosure
Last week's PHP2Shell bugs and disclosure had the same familiar ingredients of Dan Kaminsky's DNS bug, but with AI sprinkles on top. Multiparty Coordinated Vulnerability Disclosure (CVD) can be comple...
www.lutasecurity.com
October 27, 2026 at 4:52 PM
PHP2Shell had everyone buzzing last week, but the multiparty vulnerability disclosure felt all too familiar. Dan Kaminsky's DNS bug was the first attempt at such large scale coordination and we should expect more like this from AI-assisted research
www.lutasecurity.com/post/php2she...
www.lutasecurity.com/post/php2she...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
www.bleepingcomputer.com
October 27, 2026 at 8:21 AM
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday.
PHP2Shell security flaws now sucessfully exploited in the wild
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild. [...]
www.bleepingcomputer.com
October 26, 2026 at 9:58 AM
PHP2Shell security flaws now sucessfully exploited in the wild
CISA confirms PHP2Shell under attack as researchers clock successful exploits
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
www.theregister.com
October 27, 2026 at 2:47 PM
CISA confirms PHP2Shell under attack as researchers clock successful exploits
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems.
The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root
thehackernews.com
October 28, 2026 at 4:56 PM
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
‼️ 82 PROZENT UNGEPATCHT
Über 34 Millionen Systeme noch anfällig für PHP2Shell
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
Über 34 Millionen Systeme noch anfällig für PHP2Shell
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
82 Prozent ungepatcht: Über 34 Millionen Systeme noch anfällig für PHP2Shell - Golem.de
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
glm.io
October 24, 2026 at 8:43 PM
‼️ 82 PROZENT UNGEPATCHT
Über 34 Millionen Systeme noch anfällig für PHP2Shell
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
Über 34 Millionen Systeme noch anfällig für PHP2Shell
Laut Scans von Censys ist PHP2Shell auf den meisten Systemen im Netz noch ausnutzbar. Allein in Deutschland gibt es Millionen davon.
Nach PHP2shell gab es jetzt noch node2shell. Wobei letzter auf eine von Google veröffentliche Library namens brotli zurückzuführen ist und in vielen Projekt auch ausserhalb "node.js" verwendet wird.
Wegen php2shell hatte ich das node2shell nicht auf dem Schirm. Patch einspielen und Neustart reicht.
Wegen php2shell hatte ich das node2shell nicht auf dem Schirm. Patch einspielen und Neustart reicht.
October 29, 2026 at 7:22 AM
Nach PHP2shell gab es jetzt noch node2shell. Wobei letzter auf eine von Google veröffentliche Library namens brotli zurückzuführen ist und in vielen Projekt auch ausserhalb "node.js" verwendet wird.
Wegen php2shell hatte ich das node2shell nicht auf dem Schirm. Patch einspielen und Neustart reicht.
Wegen php2shell hatte ich das node2shell nicht auf dem Schirm. Patch einspielen und Neustart reicht.
PHP2Shell is a warning shot for vulnerability disclosure
PHP2Shell is a warning shot for vulnerability disclosure
Keeping secrets is difficult in an open world, but we've done it before and must do it again
www.theregister.com
October 26, 2026 at 9:40 AM
PHP2Shell is a warning shot for vulnerability disclosure
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (PG Play) to help security practitioners examine and defend against the critical “PHP2Shell” vulnerabilities (CVE-2026-109618 and […]
cybersecuritynews.com
October 28, 2026 at 6:52 PM
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
Chained PHP2Shell Exploit Roots 25 Servers
Chained PHP2Shell Exploit Roots 25 Servers
dreamgroup.com
October 28, 2026 at 10:24 PM
Chained PHP2Shell Exploit Roots 25 Servers
CISA confirms PHP2Shell under attack as researchers clock successful exploits
www.theregister.com/cyber-crime/...
#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus
www.theregister.com/cyber-crime/...
#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus
CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
www.theregister.com
October 27, 2026 at 4:26 PM
CISA confirms PHP2Shell under attack as researchers clock successful exploits
www.theregister.com/cyber-crime/...
#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus
www.theregister.com/cyber-crime/...
#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]
www.bleepingcomputer.com
October 27, 2026 at 9:02 AM
CISA confirms PHP2Shell vulnerabilities now exploited in attacks
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
Hackers exploit PHP2Shell flaws to attack university and business websites, using public code to execute commands on unpatched servers.
cybersecuritynews.com
October 26, 2026 at 9:02 PM
Hackers Weaponize Public PHP2Shell Exploit Code to Target Universities and Business Websites
PHP2Shell exposure data from Censys: php2shell.censys.com
October 23, 2026 at 5:02 PM
PHP2Shell exposure data from Censys: php2shell.censys.com
~Morphisec~
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
PHP2Shell Targets Windows IIS
www.morphisec.com
October 28, 2026 at 12:51 PM
~Morphisec~
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
Unauthenticated PHP2Shell attacks are hitting Windows IIS servers with reverse-shell payloads.
-
IOCs: CVE-2026-109618, CVE-2026-109619
-
#CVE2026109618 #PHP2Shell #ThreatIntel
“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response: thenewstack.io/php2shell-un... via @thenewstack.io & @sjvn.bsky.social
The PHP panic hasn't turned into patching, and that’s bad news, capital B, as #PHP2Shell attacks ramp up.
The PHP panic hasn't turned into patching, and that’s bad news, capital B, as #PHP2Shell attacks ramp up.
“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response
PHP2Shell exploits are confirmed in the wild, yet 93.6% of systems remain exposed. Worse, many run PHP versions that will never get a patch.
thenewstack.io
October 27, 2026 at 9:19 PM
“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response: thenewstack.io/php2shell-un... via @thenewstack.io & @sjvn.bsky.social
The PHP panic hasn't turned into patching, and that’s bad news, capital B, as #PHP2Shell attacks ramp up.
The PHP panic hasn't turned into patching, and that’s bad news, capital B, as #PHP2Shell attacks ramp up.
There's a third PHP2Shell bug, but it won't get an emergency fix
There's a third PHP2Shell bug, but it won't get an emergency fix
Bad things (and software bugs?) come in threes
www.theregister.com
October 23, 2026 at 8:09 PM
There's a third PHP2Shell bug, but it won't get an emergency fix