Open Cyber Threat Intelligence

Wiz Research discovered critical remote code execution (RCE) and memory disclosure vulnerabilities in PHP's core engine, collectively dubbed 'PHP2Shell', affecting nearly all PHP versions released in the last decade, including PHP 5.4 and later. The vulnerabilities stem from memory-safety issues related to how PHP handles fatal errors during request processing, enabling unauthenticated attackers to achieve remote code execution or read sensitive process memory containing passwords, tokens, and API keys. Exploitation is application-agnostic and affects any PHP-based application, including WordPress, Drupal, and Joomla, even with secure application code. The vulnerabilities were responsibly disclosed and patched on October 21, 2026, with AI models playing a key role in both discovery and exploit development.

On October 18, 2026, OpenCode disclosed a security breach resulting from a large-scale distillation attack. The incident affected 1.4% of OpenCode Console users who had linked external AI providers such as Anthropic, OpenAI, or Google. OpenCode notified impacted users via email and stated the incident is ongoing, with no root cause or data accessed details released. The primary risk involves potential exposure of linked API credentials, which could allow attackers to perform inference at the victim's expense or access data accessible via those keys.

On October 21, 2026, the Python package litellm version 1.107.0 was compromised on PyPI, with all seven compiled wheels and official Docker images containing malicious payloads. The attack originated from a lookalike GitHub repository (Berri-AI/litellm) that was used to build the release, bypassing security controls. The malicious wheels install three files—cook.pth, cook.py, and sitecustomize.py—into the Python site-packages directory, which execute automatically on every Python interpreter start. These payloads include a credential stealer named 'privcollect' that exfiltrates sensitive data such as browser passwords, SSH and GPG keys, cloud credentials, and LiteLLM proxy database contents to the domain www.litellm.dev, and a remote code loader that polls a GitHub dead drop hourly for additional commands. The attacker gained access through stolen GitHub tokens exposed in logs and modified the release workflow using an organization owner's token, allowing the malicious artifacts to be signed and published through legitimate channels.

A financially motivated threat actor operating under the handle BUGSTER leveraged AI-powered tools, specifically the Hermes Agent framework with DeepSeek V4 as the reasoning engine, to plan and execute multiple cybercrime activities. The actor conducted credential theft via WordPress brute-forcing, exfiltrated over 5,200 student and faculty records from an Indian university's MongoDB database, and engaged in VoIP fraud planning, Wi-Fi password cracking, and cryptocurrency reconnaissance. The actor used a US-based server for command-and-control operations and employed AI-generated scripts and reconnaissance reports to lower the skill barrier for executing diverse attacks.

Unit 42 has identified two critical remote code execution (RCE) vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, both rated 9.2 on CVSS 4.0. CVE-2026-109618 allows attackers to achieve RCE by exploiting improper control flow during out-of-memory error handling via longjmp(), leaving request memory uninitialized. CVE-2026-109619 enables RCE by causing global memory to point to freed memory regions during fatal error handling, which can be later accessed or executed. Proof-of-concept exploits exist, and over 22.6 million internet-exposed PHP instances are potentially vulnerable, prompting urgent patching recommendations.

Eight intermediate certificate authority (CA) private keys belonging to Indian CA eMudhra Limited were compromised due to a cryptographic defect during certificate generation, where insufficient randomness allowed attackers to derive private keys from public certificates. This enables threat actors to sign unauthorized TLS certificates and conduct man-in-the-middle (MitM) attacks, such as traffic interception, impersonation, or session hijacking. Major browser and OS vendors have taken action to revoke or untrust the affected intermediate CAs, and eMudhra has revoked the eight compromised certificates. Organizations are advised to audit PKI assets, reissue certificates, update trust stores, and monitor for MitM activity to mitigate risks.

Cisco Talos has identified two critical unauthenticated remote code execution (RCE) vulnerabilities in PHP core, tracked as CVE-2026-109618 and CVE-2026-109619, collectively dubbed 'php2shell'. These flaws affect all PHP versions since 5.4 and can be exploited via a plain HTTP request before any application code runs, making them highly dangerous. The vulnerabilities stem from improper handling of out-of-memory conditions and reuse of stale internal state after memory deallocation. While initial exploitation has been limited to scanning and basic payloads, Talos expects more sophisticated campaigns to emerge as threat actors integrate the vulnerabilities into their tooling.

Cisco Talos disclosed the compromise of eight intermediate certificates issued by eMudhra due to a flaw in their key generation process, which resulted in weak private keys with only 3–8 bits of entropy instead of the required 384 bits. This vulnerability allows attackers to recover private keys and impersonate legitimate websites or code-signing services. The affected certificates were used for TLS and code signing, with six TLS certificates already blocked by major browsers and two code-signing certificates blocked by Microsoft. The issue has been designated as CVE-2026-111943, and patches have been released in Go versions 1.27.3 and 1.26.10 to filter out certificate chains containing the compromised keys.

A critical vulnerability in OpenCode versions 1.0.137 through 1.18.32 allows a malicious or compromised MCP (Model Context Protocol) server to execute arbitrary code on a developer's Windows or WSL machine during sign-in. The flaw arises because OpenCode passes an untrusted OAuth authorization endpoint URL from the MCP server to a browser helper without proper escaping, leading to command injection via PowerShell on Windows. The vulnerability was fixed in version 1.18.33, but no CVE was assigned, and it remains unflagged by vulnerability scanners. Although no active exploitation has been observed, the risk persists for unpatched installations connected to untrusted MCP servers.

Railway, a Platform-as-a-Service provider, disclosed an incident where an unauthorized third party may have accessed encrypted customer environment variables and, in some cases, obtained decrypted contents. The breach potentially allowed attackers to extract sensitive data such as API keys, database credentials, and cryptocurrency wallet private keys, leading to at least one confirmed cryptocurrency theft. The company urges affected customers to rotate credentials and has taken internal measures including rotating bucket credentials and invalidating API tokens. The incident is suspected to be part of a broader campaign targeting cloud platforms to enable 'LLMjacking'—abusing AI inference resources at the victim's expense.