PHP2Shell exploitation confirmed, but mass attacks remain elusive

Steve ZurierOctober 26, 2026

PHP2Shell exploits are emerging, but widespread attacks remain unconfirmed as scanning surges.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Container security
Moving images: How a runtime bill of materials provides total dependency visibility
Penetration Testing
In continuous operation: How Simpson Strong-Tie safely AI red-teams AI-powered applications

PODCASTS

Application security
Securing Modern Financial Systems in the Age of AI – Rashid Feroze – ASW #406
Network Security
Building a parallel Internet, security buzzwords that should be retired, and the news – Barrett Lyon – ESW #482
Vulnerability Management
Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More – SWN #627
Vulnerability Management
PHP2Hell – Joshua Wright – PSW #949
Leadership
Minimum Viable Company as Security’s Inflection Point & Human Breaking Point Collide – Kriss Stephen – BSW #470

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news.

Perspectives

In Brief

More Resources

AI Agent concept with glowing neon interface icons for data cloud settings and sharing representing artificial intelligence and digital network

AI pentesting tool Artex used in recent ConnectWise compromise

Steve ZurierOctober 23, 2026

China-linked hackers used agentic AI to accelerate attacks on Microsoft cloud tenants via ConnectWise.

Vulnerability Management

PHP2Shell attacks surge worldwide as governments rush to patch

Steve ZurierOctober 22, 2026

PHP2Shell attacks spread worldwide as governments rush to patch and legacy systems remain exposed.

Credit: Adobe Stock

Application security

CISA advises orgs to patch PHP2Shell bugs immediately

Steve ZurierOctober 21, 2026

CISA urges immediate PHP2Shell patching as attackers target critical flaws in widely used PHP code.

AI benefits/risks

Deepfakes are becoming a security control problem, not just a media problem

SC Media Editorial Intelligence, reviewed by HabibullahOctober 21, 2026

A sign on top of a building reads "Siemens" in blue letters.

Siemens Software Center flaw exploited in ClickFix DLL-sideloading attack

Steve ZurierOctober 20, 2026

Malware lets attackers gain the Siemens app with full privileges into industrial enterprises.

(Adobe Stock)

Attackers compromise Microsoft 365 credential via ConnectWise Cloud Backup

Steve ZurierOctober 19, 2026

Stolen ConnectWise app credential enables unauthorized access to hundreds of Microsoft 365 tenants.

(Credit: monticellllo – stock.adobe.com)

Vulnerability Management

BeyondTrust zero-day exploited by China-linked group Armory Castle

Steve ZurierOctober 16, 2026

Chinese group tied to at least three other major exploits over the past few weeks.

(Adobe Stock)

Cisco warns critical Secure Email Gateway bug exploited in the wild

Steve ZurierOctober 15, 2026

Cisco confirms active exploitation of critical email gateway flaw, warns attackers can erase evidence.

Events