PHP2Shell RCE Exploited Hours Before Patch as LiteLLM Wheel Ships Stealer
Critical PHP2Shell RCE hit honeypots 5.5 hours before fixes, a poisoned LiteLLM release stole credentials, and APT28 breached a NATO naval shipbuilder.
Sources:
PHP2Shell: critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | ELLIO | ELLIO Blog
Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor - Real-time Open Source Software Supply Chain Security
Russia Weaponized Microsoft Edge to Breach NATO Naval Shipbuilder in Two-Month Espionage Campaign
FBI Warns SafePay Ransomware Has Hit 600 Organizations — Here’s How Businesses Can Protect Themselves
Court Records Reveal…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.