php group News Articles
Recent news articles refferecing the vendors vulnerabilities.
It Brief AustraliaEven the dark web took PHP2Shell seriously
Forum operators moved quickly to shut down or restrict access after two critical PHP flaws exposed a route to remote code execution and stolen data.
1 week ago
Securitybrief AustraliaEven the dark web took PHP2Shell seriously
Forum operators moved quickly to shut down or restrict access after two critical PHP flaws exposed a route to remote code execution and stolen data.
1 week ago
Channellife AustraliaEven the dark web took PHP2Shell seriously
Forum operators moved quickly to shut down or restrict access after two critical PHP flaws exposed a route to remote code execution and stolen data.
1 week ago
KasperskyPHP2Shell: what we know about the threat two weeks later
Nearly 30 million servers still haven’t been updated. Who’s attacking and how, why you need to install the second round of patches, and what signs of a breach to look for in your logs.
1 week ago
Menlo Security, Inc.CVE-2026-109618PHP2Shell: What to Know About CVE-2026-109618 and -109619 - Blog | Menlo Security
Two critical PHP flaws let attackers take over web servers without logging in. Learn affected versions, how PHP2Shell works and what to do now.
2 weeks ago
Infosecurity MagazineChinese Actor Compromises US Government Network Via Chained PHP2Shell
Dream found that a suspected Chinese-nexus actor gained root access to Palo Alto Network firewall servers to target government organizations
2 weeks ago
SourcetrailPHP2Shell: critical PHP bugs targeted, patch now
PHP2Shell PHP flaws are under attack: check patched versions, CISA deadline, scanner options, and a separate no-patch bug.
2 weeks ago
Palo Alto Confirms Active PHP2Shell Exploitation Targeting Exposed PAN-OS Management Interfaces
Palo Alto Networks has confirmed that attackers are actively exploiting PHP2Shell vulnerabilities against PAN-OS management interfaces exposed to the internet.
2 weeks ago
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
OffSec launches a free PHP2Shell lab in PG Play to help defenders examine and counter AI-driven critical PHP vulnerabilities.
2 weeks ago
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Palo Alto Networks firewalls have been rooted via PHP2Shell exploits, but no WordPress site has been compromised.
2 weeks ago
The Hacker NewsCVE-2026-109618Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks reports active PHP2Shell exploitation against internet-exposed PAN-OS management interfaces that allow unauthenticated RCE.
2 weeks ago
TechbullionOffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive...
2 weeks ago
CybersecuritynewsCVE-2026-109618OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery. OffSec today announced the release of a free, interactive hands-on lab in Proving Grounds Play (P...
2 weeks ago
LatesthackingnewsOffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery - Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses
New York, United States, October 28th, 2026, CyberNewswire New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability...
2 weeks ago
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New York, United States, 28th October 2026, CyberNewswire
2 weeks ago
Dev CommunityCVE-2026-109618PHP2Shell (CVE-2026-109618/109619): patching PHP on VPS, Docker and mod_php
PHP2Shell at a glance Details CVEs CVE-2026-109618 (out-of-memory corruption), CVE-2026-109619... Tagged with php, security, devops, wordpress.
2 weeks ago
PHP RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619: what to check and how to update
On 21 October 2026 the PHP project released PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to fix two critical... Tagged with php, security, webdev, news.
2 weeks ago
ESTsecurity Releases Scanner for PHP2Shell Flaw
ESTsecurity released an emergency CLI scanner to detect the PHP2Shell remote code execution flaw across servers, containers and images.
2 weeks ago
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery | HackerNoon
New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery.
2 weeks ago
Cio.com UkOffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
Press release By CyberNews Wire Oct 29, 20266 mins New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes...
2 weeks ago
HackreadCVE-2026-109618CISA Confirms PHP2Shell Exploitation, Orders Federal Agencies to Patch
The flaws are collectively called PHP2Shell and assigned a CVSS score of 9.2 each. CVE-2026-109618 involves memory corruption linked to out-of-memory
2 weeks ago
After Black October: PHP Security Questions Remain
After Black October, PHP teams must verify patches, investigate earlier attack attempts, and check configurations before closing their security response.
3 weeks ago
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): is your website affected, and how to fix it
Two critical PHP flaws let attackers run code on a web server without logging in. Which sites are affected, the fixed PHP versions, how to check yours on shared hosting, WordPress, VPS or Docker, and why the popular workaround isn't enough. Tagged with security, php, php2shell, wordpress.
3 weeks ago
Dev CommunityCVE-2026-109618PHP2Shell: a client-proof patch checklist for freelancers (CVE-2026-109618 / 109619)
How to check that a client's PHP really has the 21 Oct 2026 fix, what to look for since 17 Oct, and what to tell the client. Sources: CISA, Tenable, Amazon, Hostinger, php.net. Tagged with php, wordpress, security, webdev.
3 weeks ago
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
CISA adds two exploited PHP2Shell flaws to its KEV catalog after honeypot tests confirm remote code execution on a single-worker mod_php setup.
3 weeks ago