AnalysisCybersecurityOctober 25, 2026

Attackers used agentic AI in PHP2Shell post-exploitation

Read original source →thehackernews.com

Palo Alto Networks Unit 42 said attackers hit a European government entity and within two hours had password hashes and MFA secrets, then built an NTLM-relay tunnel into Active Directory. Command batches wrapped in delimiters like ==SHELLUSER== produced machine-parseable output for an AI model to read.

1 source

More stories today

Open the live feed