CRITICALVulnerability
Global

PHP2Shell Actively Exploited, US Cybersecurity Agency Warns

·Source: Bank Info Security

Updated:

Executive Summary

North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiri

Analysis

North Koreans Tied to Active Scanning for Critical Vulnerabilities in PHP The U.S. Cybersecurity and Infrastructure Security Agency sees critical PHP2Shell vulnerabilities being exploited in the wild, and is requiring federal civilian agencies to rapidly mitigate them. Researchers said North Korean hackers are among the many threat actors showing an interest in the flaws.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/php2shell-actively-exploited-us-cybersecurity-agency-warns-image_small-2-a-33219.jpg
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
Source Attribution

Originally published by Bank Info Security on Oct 27, 2026.

Related Threats