Amazon Threat Intelligence identified a PHP2Shell exploitation attempt dating to Oct. 17, 2026, in MadPot telemetry, four days before public disclosure of CVE-2026-109618 and CVE-2026-109619. The exploit attempt originated from an IP address associated with a commercial anonymization network. While the vulnerability was under embargo, the targeting of a honeypot from an anonymized IP address […]

Log in or sign up to comment.

No comments yet.

← Back to stories

Create FREE account

or login to continue

Signup with GoogleSignup with GitHubSignup with BlueskySignup with Blacksky
Sign up with email

Already have an account? Log in