AI Employed by Attackers in PHP2Shell Vulnerability Exploitation

Threat actors are exploiting critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619), with reports indicating the use of agentic AI platforms for post-exploitation activities. In one incident, a European government entity had password hashes and MFA secrets compromised within two hours of initial exploitation. This highlights an evolving threat landscape where AI accelerates cyberattacks.