PHP2Shell Exploits Hit European Government Entity Using AI-Assisted Tools

Threat actors are actively exploiting PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). In a recent incident targeting a European government body, attackers utilized agentic artificial intelligence platforms for post-exploitation tasks, successfully harvesting password hashes and authentication credentials within hours of initial access.