PHP2Shell RCE flaws exploited in the wild, with AI-assisted post-exploitation
On the radar
05 TOP STORIESThe Hacker News · 6 min read
PHP2Shell RCE flaws exploited in the wild, with AI-assisted post-exploitation
BleepingComputer confirms CVE-2026-109618 and CVE-2026-109619 (PHP2Shell) are being exploited successfully. The Hacker News reports global scanning and an intrusion at a European government entity, where attackers used agentic AI tools after exploitation to reach credentials. Defenders face both critical RCE and attackers who move faster once inside.
BleepingComputer · 4 min read
Malicious AGENTS.md in Downloads folder tricked AI coding agent
Researchers found a booby-trapped AGENTS.md file in a developer's Downloads folder that tried to make an AI coding agent install a known-malicious npm package. Forever Security says it was stopped before execution. Agents that read instruction files from the local filesystem can be steered by anything that lands there.
Hacker News (front page) · 6 min read
Gheist campaign abuses stolen GitHub tokens to leak secrets via Actions logs
Per Wiz, the attackers use stolen GitHub tokens to plant workflows that dump repository secrets into Actions logs. Wiz's title says the attempt at scaled abuse stumbled. Any leaked token with write access to workflows is a path to every secret the repository holds.
The Hacker News · 7 min read
Unpatched Tailscale SSH flaws allow root on other servers from one hacked device
The Hacker News reports that an attacker controlling one compromised device could gain root on other reachable servers through Tailscale SSH. The flaws are described as unpatched. Teams using Tailscale SSH should review which devices can reach which servers; the summary gives no CVE or version details.
The Hacker News · 5 min read
Token-replay campaign compromises 97 Microsoft 365 accounts at 79 organizations
Huntress reports an adversary-in-the-middle campaign that replays stolen session tokens. Replayed tokens bypass the password and MFA checks that were completed when they were issued, so token binding and session-anomaly detection matter more than a second factor alone.
Go a little deeper
EXPLORE BY TOPIC- 41 articles
Cyber security
Credential and token theft dominate the day, from GitHub tokens to M365 sessions to 2FA codes on phones. AI agents appear as both attack surface and attacker tooling, and the arXiv feed is heavy on prompt-injection defenses.
Read 8 updates - 9 articles
Tech industry
Apple's foldable iPhone Duo draws repair scrutiny, Google's AI search is reshaping publisher economics, and an Apollo economist questions AI's financial return outside tech.
Read 6 updates - 27 articles
AI
Economics and operations lead the day: API price cuts of up to 80%, an IBM CEO endorsing on-prem open-weight models, and a skeptical Apollo economist. Research items probe unlearning leaks and LLM auditors' misplaced trust in static analysis.
Read 8 updates - 17 articles
IT & infrastructure
A live DreamHost incident is the operational item. The Linux 7.4 merge window brings ext4 and sound changes, with a maintainer flagging AI patch volume. Tesco's move off VMware is a concrete example of the Proxmox shift.
Read 8 updates - 14 articles
CS & research
A thin day outside security and AI. The C++26 ballot result leads, followed by cryptography-adjacent protocol and quantum papers.
Read 5 updates