PHP2Shell Exploitation Hits European Government Entity With AI-Assisted Hacking

Threat actors exploited the PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 to breach a European government entity. Within two hours they accessed password hashes and multi-factor authentication data, using agentic AI platforms for post-exploitation.

• Attack on a European government entity via CVE-2026-109618 and CVE-2026-109619
• Password hashes and MFA data accessed within two hours of exploitation
• Agentic AI platforms used for post-exploitation activity
• Global scanning of vulnerable systems observed