Cyber ·
Limited PHP2Shell exploitation reports and suspected campaign against US government-linked servers
A cybersecurity company listed about six exploitations of the PHP2Shell flaws. Another identified a suspected, well-targeted campaign, possibly attributed to China-linked actors, that breached US servers affiliated with the government. Source: The Record, machine translation.
According to the news published on October 29, 2026 through The Record feed, a cybersecurity company listed about six exploitations of the PHP2Shell flaws, in still limited reports. Another company identified a suspected, well-targeted campaign, possibly attributed to China-linked actors, that breached US servers affiliated with the government. The text is a machine translation and does not detail affected versions, technical vectors or indicators of compromise. This item is a security alert and does not show any Rota Nacional capability over the flaw: Rota does not patch PHP and does not replace the vendor advisory. For the organization, the practical step is to check the official PHP and operating system vendor notices to see whether your version is affected, apply the recommended fix and review access logs. If the team uses AI to study the material, do not paste logs, keys, passwords, e-mails or user names. Rota detects some personal data, such as CPF, CNPJ, e-mail, phone and names, before the model receives it, but it does not guarantee removal of every technical secret; sanitize excerpts first. To consult the source, search The Record website for the original headline and compare it with the cited company's notice and the PHP advisory page.
Original source: Surgem relatos limitados de exploração de falha no PHP