PHP2Shell Persists, AI-Powered Ransomware, and Year-End Phishing Begins

Podcast: Threat Analysis : Cyber News for Small Business · The Small Business Cyber Security Guy

Opublikowano: 2026-10-23

PHP2Shell Persists, AI-Powered Ransomware, and Year-End Phishing Begins Mauven examines three active threats demanding immediate attention from UK small businesses. PHP2Shell vulnerabilities remain widely unpatched despite active exploitation that began days before public disclosure, with automated scanning targeting WordPress, WooCommerce, and Magento installations. New research reveals ransomware affiliates using commercial AI services as operational infrastructure, spending over twenty-three thousand dollars to automate edge device exploitation at scale. Meanwhile, year-end phishing campaigns are already targeting finance and HR staff with fake compensation notices, invoice approvals, and SharePoint lures timed to coincide with Q4 administrative workload. The...