PHP2Shell Exploited Pre-Patch and ConnectWise Breach Hits 2,250 Tenants

Podcast: Threat Analysis : Cyber News for Small Business · The Small Business Cyber Security Guy

Opublikowano: 2026-10-22

PHP2Shell Exploited Pre-Patch and ConnectWise Breach Hits 2,250 Tenants Two major threats demand immediate attention from UK small businesses today. First, critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619 were actively exploited four days before patches existed. Amazon’s threat intelligence detected deliberate, pre-disclosure attacks from 17 October, with Cloudflare recording millions of exploit attempts by the time fixes arrived on 21 October. These remote code execution flaws affect the PHP installations powering most UK SMB web infrastructure, including WordPress, WooCommerce and Magento. Second, Microsoft confirms a Chinese state-linked actor exploited ConnectWise infrastructure to access 2,250 cloud tenants. The breach co...