PHP2Shell exploited at a European government entity, Unit 42 saysNew
Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.
86
- Mentions · 7d1
- Mentions · 30d2
- All mentions2
- First seenOct 16, 2026
- Last mentioned1h ago
Timeline
2 articles · newest firstHackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
Related CVEs
by mentions- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-10961812%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- Codeiumproduct · 1
- Symantecorganization · 1
- Codexai model · 1
- Palo Alto Networks Unit 42organization · 1
- Kiroproduct · 1
- PHPvendor · 1
- Cloudflareorganization · 1
- Googlevendor · 1
- OpenAIvendor · 1
- JetBrains AI Assistantproduct · 1
- Cursorproduct · 1
- Aokimalware · 1
- Amazonvendor · 1
- European government entityvictim · 1
- ChatGPTai model · 1
- GitHubvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.