ESET October roundup covers PHP2Shell, store attacks and Denmark breach
Original title: This month in security with Tony Anscombe – October 2026 edition
The video recaps PHP flaws, attacks on refrigeration at up to 700 French stores, an 8.8 million-person Danish registry leak, and preinstalled Android malware.
ESET’s Tony Anscombe reviews October cybersecurity stories in a monthly video. He highlights two critical PHP flaws dubbed PHP2Shell, in a language said to power about 70 percent of websites. Attackers raised temperatures in refrigeration systems at up to 700 French supermarkets, and a breach of Denmark’s Central Population Register exposed data on 8.8 million people. The roundup also covers malware preinstalled on thousands of cheap Android phones.
Unconfirmed: The Denmark access path and the password 123456 are claims by the person who says they carried out the hack.
- PHP2Shell refers to two critical flaws in PHP.
- Attackers set some supermarket refrigerators as high as 50 degrees Celsius.
- A claimant says the Denmark breach used a third-party password, 123456.
- Preinstalled Android malware can generate ad revenue and join botnets.
Impact: Danish personal data exposed; supermarket cooling systems altered
| Product | Affected |
|---|---|
| PHP | — |
- Victims
- Central Population Register
From the original article
1 min read at welivesecurity.comThe PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans
welivesecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.