PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
2026-10-24T02:51:36Z•1b6cf6c40278f3f29e212503c468d5eba6b8d28dd8ea372c5e189463030e5cc7
CVE-2026-109618CVE-2026-109619CVE-2026-113380CVE-2026-115560AI securityARTEXChina-linked threat actorConnectWiseINTERPOLMicrosoft 365PHPPHP2ShellSafePaySignalStorm-0940VPN compromiseactive exploitationcybercrimedouble extortionprivacyransomwareremote code executionsatellite securitystolen credentialssupply chain compromise
What happened
Security news feed highlights multiple high-impact developments, including active exploitation of critical PHP vulnerabilities (PHP2Shell), a newly disclosed PHP code-execution flaw, a critical Signal calling vulnerability, ransomware activity attributed to SafePay, and a China-linked ConnectWise/Microsoft 365 campaign using stolen credentials and an AI penetration-testing tool. It also covers major law-enforcement action, privacy litigation, satellite proximity concerns, and AI-agent safety incidents.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 1b6cf6c40278f3f29e212503c468d5eba6b8d28dd8ea372c5e189463030e5cc7
- Enrichment time
- 2026-10-24T02:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.