One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "government affiliated" servers.
Excerpt from The Record Cyber
GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at The Record Cyber:
The Record Cyber. (2026, October 29). Limited reports of PHP bug exploitation emerge. The Record Cyber. https://therecord.media/php2shell-successful-exploitation-reports-emerge