PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
// AI summary
Threat actors used agentic AI after exploiting PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 against a European government entity, accessing password hashes within two hours.
// from the source
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. "In one case, the attackers targeted a government entity in Europe and within two hours of the initial exploitation they had successfully accessed password hashes and multi-factor