Mmastodon TechnologyCybersecurity first seen 12 h ago, last 12 h ago, peak #11
PHP2Shell vulnerabilities exploited against European government entity
Original: 🤖 PHP2Shell (CVE-2026-109618, CVE-2026-109619): exploitation hits a European government entity — password hashes and MFA
Attackers exploited the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619 to breach a European government entity, reportedly accessing password hashes and MFA data within two hours of initial access. Security observers report ongoing global scanning for vulnerable systems and indications that agentic AI tools were used for post-exploitation activity.
Why now: The combination of a government breach, rapid credential theft, and possible AI-assisted exploitation is raising alarm among security researchers.
European government entityCVE-2026-109618CVE-2026-109619
Evidence
- 🤖 PHP2Shell (CVE-2026-109618, CVE-2026-109619): exploitation hits a European government entity — password hashes and MFA data accessed within two hours of initial access. Global scanning ongoing, with signs of agentic AI used for post-exploitation. 🔗 https://… · cloud@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/3655615