Wordfence sees no confirmed WordPress compromises from PHP2Shell
From October 23 to 27 Wordfence logged about 77,600 PHP2Shell requests from more than 2,000 IPs and still urges a PHP update plus restart.
74
Organization
Palo Alto Networks
- Mentions · 7d4
- Mentions · 30d50
- All mentions139
- First seenAug 17, 2026
- Last mentioned2d ago
Timeline
139 articles · newest firstCISA confirms both PHP2Shell flaws are exploited and adds them to KEV
Federal civilian agencies must fix CVE-2026-109618 and CVE-2026-109619 by October 29; patched builds are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35.
86
CISA orders agencies to patch two targeted PHP bugs by Thursday
CVE-2026-109618 and CVE-2026-109619 drew thousands of failed attempts; confirmed successful exploitation remains unproven.
86
CSO ranks incumbent security vendors adapting to AI threats
Palo Alto’s Prisma AIRS hit $100 million ARR, and the company bought CyberArk for $25 billion.
22
Attacker used DeepSeek to steal 5,200 Indian university records
Unit 42 says a weak administrator password, not a new software flaw, exposed the MongoDB holding student and staff data.
62
Unit 42: BUGSTER used DeepSeek V4 in India university data theft
The actor brute-forced a site and stole more than 5,200 student and faculty PII records, Unit 42 says.
64
AI-scripted campaign hit government Linux servers, Unit 42 says
Cluster CL-UNK-1211 used web shells, a sudo-password hook, and SysGoRAT while hunting databases and mailboxes.
74
UNC5820 used Fortinet zero-days to plant PeerStitch at a telecom
CISA added CVE-2025-61624 to KEV; the memory-only implant rides legitimate FortiGate process traffic.
84
Contributor urges zero standing privilege for machine identities
A cited survey found 109 machine identities per human and 61% of privileged requests still standing.
28
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Fortinet and BeyondTrust flaws to KEV, with a federal fix deadline of October 19.
88
AI-Assisted Hackers Compromise Government Linux Servers to Deploy Backdoors and Steal Credentials
Unit 42 says unattributed cluster CL-UNK-1211 backdoored government Linux servers and stole administrator credentials.
74
Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Unit 42 says September 2026 intrusions most often began with edge exploits and abused credentials.
46
Hackers Use AI-Generated Scripts to Hijack Linux Sudo Commands and Steal Passwords
Unit 42 says CL-UNK-1211 used AI-assisted scripts to steal Linux sudo passwords from government targets.
76
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
Unit 42 says PEERSTITCH, planted through FortiManager flaws, exposed material for more than 500 firewalls.
82
CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
CISA added PAN-OS code injection flaw CVE-2026-0322 to the KEV catalog after real-world attacks; federal agencies must mitigate by October 17.
80
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
Unit 42 says CL-STA-0954 used Fortinet flaws to deploy memory-resident PEERSTITCH against a telecom provider.
84
Horizon3 Promotes Keith Poyser to General Manager, EMEA Following More Than 260% Regional Revenue Growth
Horizon3 promoted Keith Poyser to General Manager, EMEA, after more than 260% regional revenue growth.
22
AI-Powered Espionage Campaign Targets Government Linux Infrastructure
Unit 42 says cluster CL-UNK-1211 used AI-generated payloads to spy on government Linux infrastructure.
78
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto says attackers are exploiting CVE-2026-0322, an authenticated PAN-OS management RCE that yields root.
84
Hackers Exploit Fortinet Vulnerabilities to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Attackers exploited Fortinet flaws at a telecom MSP and deployed the stealthy PEERSTITCH implant on FortiGate firewalls.
82
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
Attackers are exploiting PAN-OS CVE-2026-0322 for root access; CISA set a three-day fix.
82
Cisco Secure Email & PAN-OS Zero-Days Exploited
Cisco and Palo Alto patched two actively exploited zero-days enabling root code execution on email and PAN-OS appliances.
87
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
CISA added exploited Palo Alto, Cisco, and Ahsay flaws to KEV, with a three-day federal deadline.
90
11 Best Infrastructure as Code (IaC) Security Tools Compared (2026): Features & Pricing
A 2026 buyer's comparison ranks 11 IaC security scanners, platforms, and Terraform governance tools.
22
Top 10 Best Malware Analysis Tools in 2026 [Ranked & Scored]
A 2026 roundup ranks malware sandboxes and file-intelligence tools, led by context, interactive, and evasion-resistant analysis.
18
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Palo Alto patched PAN-OS zero-day CVE-2026-0322 after limited exploitation for root remote code execution.
84
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto patches exploited PAN-OS management RCE CVE-2026-0322; CISA set an October 17 deadline.
82
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
Attackers are exploiting PAN-OS CVE-2026-0322 for limited root code execution through the management interface.
78
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto says attackers are exploiting PAN-OS RCE CVE-2026-0322, which CISA added to KEV.
84
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
Unit 42 says UNC5820 stole data on 500-plus FortiGates and deployed memory-resident PEERSTITCH malware.
84
9 Best AI Gateways in 2026: Bifrost, Portkey, LiteLLM, Kong and 5 More Ranked
MarkTechPost ranks nine 2026 AI gateways, placing self-hosted Bifrost first and noting Portkey's Palo Alto deal.
36
The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk
An opportunistic attacker used stolen credentials and a misconfigured gateway to probe a European bank.
46
Ransomware Hackers Exploit Palo Alto Networks GlobalProtect VPN Authentication Bypass Vulnerability
Qilin and Settra ransomware gangs actively exploit Palo Alto GlobalProtect auth bypass CVE-2026-0257 to hijack VPN sessions and breach networks.
88
Ransomware Actors Exploiting Palo Alto GlobalProtect Flaw for Stealthy VPN Access
Qilin and Settra are exploiting Palo Alto GlobalProtect CVE-2026-0257 for unauthorized VPN access.
83
Anthropic launches a free AI scanner for open-source projects
Anthropic launched Cyber Mission, giving infrastructure operators Claude access, plus a free open-source vulnerability scanner.
72
Top 10 Best IaC Security Tools in 2026 [Ranked & Scored]
A 2026 ranking puts Wiz, Snyk IaC, and Checkov atop ten infrastructure-as-code security tools.
24
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Anthropic launched unreviewed AI vulnerability reports for OSS maintainers and an OT security program with 11 firms.
64
Anthropic Launches Cyber Mission to Protect Critical Infrastructure and Open-Source Software With Claude AI
Anthropic launched Cyber Mission: Claude-powered critical infrastructure defense with 12 security partners plus a free OSS Scanner for automated vulnerability reports.
58
Anthropic Cyber Mission to Support Defenders with Tools, Research, and Resources
Anthropic launched a Cyber Mission pairing Claude, engineers, and partners to defend critical infrastructure and open-source projects.
65
Related CVEs
by mentions- CVE-2026-03222%8.6Authenticated root RCE in Palo Alto PAN-OS management
- CVE-2025-616241%6.5Authenticated path traversal in Fortinet FortiOS and related products
- CVE-2024-4757595%9.8Unauthenticated RCE in Fortinet FortiManager and FortiManager Cloud
- CVE-2026-765192%9.8Relative Path Traversal to Root RCE in Cisco Secure Email Gateway
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877278%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2022-26134100%9.8Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
Appears with
- Palo Alto Networksvendor · 86
- Unit 42organization · 49
- Microsoftvendor · 16
- CrowdStrikeorganization · 15
- Unit 42vendor · 15
- CISAorganization · 14
- Microsoftorganization · 14
- Cortex XDRproduct · 12
- PAN-OSproduct · 12
- PA-Seriesproduct · 9
- Anthropicvendor · 9
- VM-Seriesproduct · 9
- Fortinetvendor · 8
- Claudeai model · 8
- Panoramaproduct · 8
- Prisma Accessproduct · 7
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.