PHP2Shell RCE flaws exploited in the wild, with AI-assisted post-exploitation
Themes & analysis
AI agents are now both target and weapon
The AGENTS.md hijack shows a local file steering a coding agent toward a malicious package. The PHP2Shell intrusion shows attackers using agentic tools after exploitation. The arXiv feed fills with agent authorization, skill-composition and guardrail-bypass papers. Defenders must treat anything an agent reads as untrusted input, and expect attackers to automate post-exploitation.
Stolen tokens remain the cheapest way in
Gheist uses GitHub tokens, Huntress's campaign replays M365 session tokens, uCreator takes Telegram 2FA codes, and DreamHost is forcing password resets. Each skips the exploit and uses a credential or session. Short-lived, scoped tokens and session binding reduce the damage more than another patch cycle.
AI-generated volume is straining maintainers
Takashi Iwai describes an AI flood of kernel patches and bug reports, and r/opensource moderators banned AI projects. Yesterday's brief flagged curl's plan to publish low-severity reports. My speculation: projects will keep tightening intake and disclosure policy, and the rules will sometimes overshoot, as the r/opensource backlash suggests.
AI cost pressure is pushing buyers toward self-hosting
API prices fell by up to 80%, IBM's CEO calls on-prem open-weight models irresistible, Aiven pitches a gateway for token bills, and Apollo sees little payoff outside tech. Tesco's move from VMware to Proxmox shows a similar urge to escape vendor pricing. This is a pattern across separate items, not one reported trend.
Watch list
PHP2Shell is exploited in the wild. Watch for patched PHP releases or advisories for CVE-2026-109618 and CVE-2026-109619, and for any further reporting on the AI-assisted intrusions.
Watch for PHP release or advisory for CVE-2026-109618 / CVE-2026-109619
Tailscale SSH flaws were reported unpatched. Watch for a fix, CVE ids and a statement on exposure.
Watch for Tailscale patch or advisory
DreamHost has an active incident forcing password resets. Watch for the cause, scope and any data exposure.
Watch for DreamHost post-incident statement
The eMudhra intermediate CA compromise is covered in an Apple support note. Watch for other trust-store vendors' responses and revocation details.
Apple's event is expected to bring a touchscreen MacBook Pro and M6 updates, with iPhone Duo hinge scrutiny as a backdrop.
Watch for Apple 'Pro and tell' event, October 28
Meta delayed enforcement of its new business terms after publisher pushback over AI scraping. See whether the terms change first.
Watch for Meta business terms enforcement, November 20