THE DAILY CYBER.
Monday, October 26, 2026 · Cyber news, in panels.
Researchers observed PHP2Shell (CVE-2026-109618 and CVE-2026-109619) execute shells on honeypots after broad probing. Upgrade internet-facing PHP to a fixed release immediately, then inspect for suspicious worker-spawned processes and file changes.

PHP2Shell now reaches working shells

Researchers observed PHP2Shell (CVE-2026-109618 and CVE-2026-109619) execute shells on honeypots after broad probing. Upgrade internet-facing PHP to a fixed release immediately, then inspect for suspicious worker-spawned processes and file changes.

← Yesterday Tomorrow →

Get tomorrow's comic in your inbox

One panel a day. No spam, unsubscribe with one click.