← All stories

AI security

PHP2Shell vulnerability was exploited days before public disclosure, Security Affairs reports

By Security Affairs1 min read

Security Affairs has published a Q&A with researcher Pierluigi Paganini on the PHP2Shell vulnerability, which he says attackers began exploiting four days before it was publicly disclosed. The discussion covers the flaw's early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data.

Cover for a ai-security story

Attackers began exploiting the PHP2Shell vulnerability four days before the flaw was publicly disclosed, according to researcher Pierluigi Paganini, who discussed the issue in a question-and-answer piece published by Security Affairs.

In the interview, Paganini explains the fundamentals of PHP, the server-side scripting language at the heart of the vulnerability, and describes how widely it is deployed across the internet. That broad footprint, the discussion notes, shapes the potential impact of a flaw like PHP2Shell, which can expose servers and the data they hold.

According to Security Affairs, the conversation covers several themes:

  • **Early exploitation:** Paganini's latest reporting indicates hackers were already abusing the vulnerability ahead of its public disclosure, leaving defenders with no window to patch before attacks began.
  • **AI-assisted attacks:** The interview addresses how artificial intelligence can be used to assist offensive activity, a growing concern across the security community.
  • **Business and personal risk:** The piece examines the dangers the flaw poses to companies, servers, and personal data stored on affected systems.

The article is presented as the first in a series of questions put to Paganini, with further exchanges indicated but not included in the available excerpt. Specific technical details of the vulnerability, such as affected versions or indicators of compromise, were not included in the excerpt provided by Security Affairs. Readers seeking mitigation guidance are directed to the original report for the full discussion.

Source: Security Affairs

Cover for a ai-security story

AI security

Apple Adds Setting to Exclude Apps from Siri AI, EFF Says

Apple's latest device update, iOS 27.2, introduces a setting that lets users exclude apps from Siri AI features, according to the Electronic Frontier Foundation, which says the change addresses a request from its Encrypt It Already campaign.

1 min read

AI-written summary Source: EFF Updates · Fetched

Cover for a ai-security story

AI security

Unit 42 Warns of Peak Season Cyber Threats Targeting Retailers

Unit 42 has outlined the key cyber threats facing retailers during the peak shopping season, ranging from ransomware to attacks involving artificial intelligence, along with guidance on defending operations and customer trust.

1 min read

AI-written summary Source: Unit 42 · Fetched

Cover for a ai-security story

AI security

GitHub's npm package firewall can block brand-new versions before they install

GitHub has announced a package firewall for npm that checks packages against an enterprise's policy before they install, blocking known malware, critical vulnerabilities and brand-new versions, Help Net Security reported. The checks run before a package reaches a developer's laptop, a build or a coding agent.

1 min read

AI-written summary Source: Help Net Security · Fetched

How to read this

Authorized-only · evidence-based · point-in-time. Aegis cannot guarantee the absence of weaknesses or hidden devices. On this machine, live external HTTP/TLS may be network-blocked and shown as an honest coverage gap. Severity and confidence are kept separate. Finished assessments persist in the encrypted store while durable storage is bound. A theme choice may persist in this browser. Export remains available for a copy you can take with you.