Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
2026-10-23T13:23:59Z•6bf300a6bf499acbb9c3998dc8a05cd579e8d78c24e5303d02f512ffa04d8286
ASLR bypassAtlassianC2 infrastructureCapcomChina APTConnectWiseDockerIran APTLiteLLMMirai botnetPHP2ShellPrince of PersiaPyPIQuest DiagnosticsSQL injectionVeloCloud Orchestratoractive exploitationdata breachhealthcaresoftware supply chainzero-day
What happened
SecurityWeek RSS items report active exploitation of a critical VeloCloud Orchestrator SQL injection zero-day, China-linked attacks against ConnectWise, Mirai-associated PHP2Shell activity with an ASLR bypass, a LiteLLM software supply-chain compromise, major Capcom and Quest Diagnostics breaches, extensive Atlassian product vulnerabilities, Iranian APT infrastructure activity, and cybersecurity industry news. The most urgent items involve exploited zero-days, supply-chain compromise, and attacks resulting in privileged access or sensitive-data exposure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 6bf300a6bf499acbb9c3998dc8a05cd579e8d78c24e5303d02f512ffa04d8286
- Enrichment time
- 2026-10-23T13:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.