importantSYS.SOURCE: The Hacker News• 2026-10-25T22:49:46+05:30
AI-Assisted PHP2Shell Exploitation Targets European Government Entity
Threat actors exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and used AI platforms for post-exploitation, targeting a European government entity and accessing password hashes within two hours. The attack highlights emerging AI-assisted hacking techniques in cybercrime campaigns.
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619.
"In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor
*** END OF TRANSMISSION ***