European government entity

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 25, 2026
Last mentioned2h ago

Timeline

1 articles · newest first

PHP2Shell exploited at a European government entity, Unit 42 says

Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.

The Hacker News17:19 UTC · 2h agoExploit / PoCExploited19 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-115560

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 4d agophpPoC ×13
CVE-2026-10961812%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 4d agophpPoC ×25
CVE-2026-115560—
published —PoC ×8

Appears with

Lazarus Groupthreat actor · 1
Palo Alto Networks Unit 42organization · 1
PHPvendor · 1
PHP Foundationorganization · 1
Cloudflareorganization · 1
CYFIRMAorganization · 1
Defused Cyberorganization · 1
ReliaQuestorganization · 1

Entities are extracted by the model from each article. First seen Oct 25, 2026, last mentioned 2h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.