Cybersecurity6 min reading time
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
The Hacker News
Read the full articleThreat actors exploited PHP2Shell vulnerabilities to breach a European government entity, using AI-assisted methods for post-exploitation activities including credential theft and Active Directory reconnaissance. A suspected North Korean campaign is conducting low-volume scans on over 200 unpatched global hosts across critical sectors.
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources
- Hackers got a four-day head start on epic PHP2Shell vulnerability· Ars Technica
- AI found a critical PHP flaw. The bigger failure began in 2024.· The New Stack (AI)
- Millions of PHP2Shell attempts so far, but officials see no break-in· The Next Web
- PHP2Shell was only the beginning: AI is accelerating the patch race· 4 sources
- PHP knew about one of the flaws in 2024 but could not agree a fix· The Next Web
