PHP2Shell: Early Attack Activity Through Imperva’s Lens

Following the public disclosure of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), Imperva Threat Research observed a sharp increase in scanning and exploitation attempts across protected environments. What had been a small number of unsuccessful probes before disclosure quickly grew into widespread automated activity targeting sites across industries and regions. Before public disclosure, Imperva participated in the coordinated […] The post PHP2Shell: Early Attack Activity Through Imperva’s Lens appeared first on Blog .