Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
The Hacker News
Read the full articlePalo Alto Networks warned attackers are exploiting PHP2Shell vulnerabilities in internet-exposed management interfaces, enabling unauthenticated remote code execution. Exploits combined with a Linux kernel bug have led to root access on servers in multiple countries, including U.S. government systems. CISA added related vulnerabilities to its Known Exploited Vulnerabilities list, mandating federal fixes by October 31, 2026.
- CISA confirms attackers are exploiting both PHP2Shell flaws· The Next Web
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges· The Hacker News
- “The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response· The New Stack (AI)
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity· The Hacker News
- Will AI expose the rickety infrastructure of the internet?· TechCrunch
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources