News
threat-intel Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected - GBHackers cybersecurity GoDaddy Revokes Over 400,000 SSL Certificates, Putting Websites at Risk of Outages - CyberPress cybersecurity Critical Signal Messenger Flaw Could Keep Microphone Active After Users End Calls - CyberPress cybersecurity PHP Fixes Critical PHP2Shell Flaws That Could Allow Remote Code Execution - CyberPress threat-intel Hackers Combine Claude Code, Codex, Grok, and DeepSeek to Automate Attacks Worldwide - GBHackers cybersecurity Storm-0940 Hackers Use ARTEX AI to Automate Cloud Attacks and Establish Persistent Access - CyberPress cybersecurity Hackers Compromise LiteLLM PyPI Package to Steal AI API Keys and Cloud Credentials - CyberPress threat-intel Signal Vulnerability Could Keep Microphone Active Even After Users Hang Up - GBHackers cybersecurity Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived - CyberPress threat-intel Node.js Patches 10 Security Vulnerabilities, Including High-Severity RCE Flaw - GBHackers cybersecurity Node.js Patches High-Severity RCE and TLS Certificate Bypass Vulnerabilities - CyberPress threat-intel LiteLLM Supply Chain Compromise Exposes AI Developer Credentials to Malware Attacks - GBHackers cybersecurity Critical GitLab RCE Flaw Lets Attackers Execute Code Without Authentication - CyberPress threat-intel PHP Fixes Two Critical RCE Vulnerabilities Allowing Unauthenticated Code Execution - GBHackers threat-intel Critical PHP Vulnerabilities Were Under Attack Days Before Security Updates Were Released - GBHackers
1 / 15
All news ›
Cybersecurity

Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived

CyberPress ·

Threat Intelligence detected attempts to exploit PHP2Shell four days before public disclosure, showing that attackers were testing the vulnerabilities while security fixes remained under embargo. The earliest attempt appeared in Amazon’s MadPot honeypot telemetry on October 17, 2026. It targeted vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619, which were publicly disclosed on October 21. The activity […] The post Attackers Were Already Testing PHP2Shell Exploits Before Security Patches Arrived appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.