Araştırmacı PHP2Shell açıklarının gerçek saldırılarda kullanıldığını doğruladı

31 kaynak
securityweek.com
  • Perplexity'den Adel Karimi, bal küplerinin 24 Ekim'de üç sahte sunucuda 35 shell komutu kaydettiğini belirterek, SecurityWeek'e göre bunun "doğrulanmış RCE" olduğunu açıkladı.
  • PHP, tanımlayıcıların sızmasının ardından 21 Ekim'de iki kritik açık için yamaları hızla yayınladı, ancak milyonlarca servis günler sonra bile savunmasız kaldı.
  • CNBC'nin haberine göre araştırmacılar, OpenAI ve Google yapay zeka modellerini kullanarak hataları tespit etti; bu sırada CrowdStrike ve diğer güvenlik hisseleri yükselişe geçti.
Kaynaklar (31)
  1. 1 PHP2Shell Exploitation Moves From Probes to Working Shells www.securityweek.com
  2. 2 PHP2Shell security flaws now sucessfully exploited in the wild www.bleepingcomputer.com
  3. 3 PHP2SHELL: Critical PHP RCE Flaws Threaten Web Infrastructure ... labs.beazley.security
  4. 4 PHP2Shell Escalates: Millions of Exploitation Attempts, Mirai Deployment Attempts, and a Confirmed Government Breach Over the Weekend (CVE-2026-109618 / CVE-2026-109619) cert.ug
  5. 5 AI's 'Black October': Critical PHP flaws set off global ... www.cnbc.com
  6. 6 Cybersecurity ETFs in Spotlight as AI's Black October Unfolds www.theglobeandmail.com
  7. 7 PHP Ships Emergency Out-of-Cycle Patch Today for Two Critical RCE Flaws After Early Leak (“PHP2Shell”) www.cert.ug
  8. 8 Critical PHP2Shell Security Vulns Evoke 'Black October' - IT Jungle www.itjungle.com
  9. 9 Black October: AI turned an old PHP flaw into an emergency, and is helping to fix it | Good Transformer goodtransformer.ai
  10. 10 Latest PHP news - BleepingComputer www.bleepingcomputer.com
  11. 11 PHP2Shell - Wikipedia en.wikipedia.org
  12. 12 CVE-2026-109618 | Tenable® www.tenable.com
  13. 13 PHP2Shell: GitLab helps find and remediate critical PHP flaws about.gitlab.com
  14. 14 AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 1 - Canadian Centre for Cyber Security www.cyber.gc.ca
  15. 15 Critical Vulnerabilities in PHP: CVE-2026-109618, ... unit42.paloaltonetworks.com
  16. 16 php2shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) github.com
  17. 17 Black October Was an Investigation Problem Before It Was a Patching Problem securityboulevard.com
  18. 18 Black October - Latent Space latent.space
  19. 19 Black October, agents tip off police, Anthropic’s IoT warning – OffSec roundup www.yeswehack.com
  20. 20 Black October (information security) - Wikipedia en.wikipedia.org
  21. 21 PHP2Shell RCE confirmed in a honeypot; Unit 42 retracts gov-hack ... whatsnewpaper.com
  22. 22 Black October: A Blue Team Field Guide v3.0 - DEV Community dev.to
  23. 23 Black October: why bugs discovered by OpenAI tech are creating a ... www.yahoo.com
  24. 24 "The Most Serious 48 Hours in Cybersecurity History": Inside Black ... www.thestateofai.com
  25. 25 PHP2Shell RCE Exploited: UK Hosting Patch Alert 2026 www.servnetuk.com
  26. 26 Responding to AI's Black October | ExoBrain www.exobrain.co.uk
  27. 27 Black October: Governments Pull Websites Offline as ... - Sify www.sify.com
  28. 28 AI finds all the vulnerabilities, Claude Duet, DeepSeek ... sub.thursdai.news
  29. 29 PHP2Shell Confirmed RCE Report: Urgently Patch PHP 8.2–8.5 Servers windowsforum.com
  30. 30 Black October 2026: Verified Incident Tracker zerohunt.ai
  31. 31 php2shell: what is confirmed five days on | noze www.noze.it
Etiketler
Share

Related Posts