Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

2026-10-23T13:23:59Z•6bf300a6bf499acbb9c3998dc8a05cd579e8d78c24e5303d02f512ffa04d8286
ASLR bypassAtlassianC2 infrastructureCapcomChina APTConnectWiseDockerIran APTLiteLLMMirai botnetPHP2ShellPrince of PersiaPyPIQuest DiagnosticsSQL injectionVeloCloud Orchestratoractive exploitationdata breachhealthcaresoftware supply chainzero-day

What happened

SecurityWeek RSS items report active exploitation of a critical VeloCloud Orchestrator SQL injection zero-day, China-linked attacks against ConnectWise, Mirai-associated PHP2Shell activity with an ASLR bypass, a LiteLLM software supply-chain compromise, major Capcom and Quest Diagnostics breaches, extensive Atlassian product vulnerabilities, Iranian APT infrastructure activity, and cybersecurity industry news. The most urgent items involve exploited zero-days, supply-chain compromise, and attacks resulting in privileged access or sensitive-data exposure.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
6bf300a6bf499acbb9c3998dc8a05cd579e8d78c24e5303d02f512ffa04d8286
Enrichment time
2026-10-23T13:23:59Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.