In this blog, Arctic Wolf Labs analyzes PHP2Shell (CVE-2026-109618 and CVE-2026-109619) and discusses active exploitation ...
1d
What is a critical PHP vulnerability? Impact on WordPress sites and immediate measures you can take
In October 2026, a critical vulnerability was announced for "PHP," a programming language widely used in website development ...
There were few, if any, reports of widespread damage by hackers exploiting PHP flaws, experts said, one day after officials warned of severe vulnerabilities.
To put it simply, we weren't using PHP.But it was my job to verify that.On October 21, PHP vulnerabilities became a hot topic ...
PHP2Shell flaws face botnet attacks, but Sophos found only failed exploit attempts and no confirmed compromises.
More than 40 hours later, the share of sites down was still more than twice the level measured a week earlier. Taking a ...
Why did PHP blow up in the news? On October 20, 2026, the PHP Group (which maintains PHP) released an alert for coming ...
Hackers exploit PHP2Shell flaws to attack university and business websites, using public code to execute commands on ...
Two critical security flaws in PHP have triggered emergency updates and temporary service shutdowns worldwide.
Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...
Security researchers warn that millions of websites remain at risk as exploitation attempts against two critical flaws in PHP have surged. The vulnerabilities, tracked as CVE-2026-109618 and CVE-2026 ...
SlowMist found PHP on 793 of 1,488 crypto domains as CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2) put exchanges on alert.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results