PulseAugur
EN
LIVE 19:04:51

Hackers exploit PHP2Shell; Chinese spies use AI agents in ConnectWise breach · 3 sources tracked

Cybercriminals are actively exploiting the PHP2Shell vulnerability, with millions of exploit attempts reported by Cloudflare. Amazon Web Services (AWS) detected malicious activity targeting this vulnerability four days prior to the release of patches. In a separate but related incident, Microsoft reported that a breach at ConnectWise allowed Chinese state-sponsored actors to access approximately 2,250 cloud tenants, utilizing AI agents to gain privileged access within hours. AI

IMPACT AI agents are being used to accelerate privileged access in cloud breaches, highlighting a growing threat vector for organizations.

RANK_REASON The cluster reports on exploitation of a known vulnerability and a data breach, which falls under the 'tool' category for security-related incidents.

Read on The Register — AI →

AI-generated summary · Google Gemini · from 3 sources. How we write summaries →

Hackers exploit PHP2Shell; Chinese spies use AI agents in ConnectWise breach · 3 sources tracked

How we ranked this

Signal score
1 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
The cluster reports on exploitation of a known vulnerability and a data breach, which falls under the 'tool' category for security-related incidents.
Source corroboration
3 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
1 days old
Coverage has settled into its steady-state source set.

Full methodology in our editorial standards.

COVERAGE [3]

  1. The Register — AI TIER_1 English(EN) · Carly Page ·

    Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure

    Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed

  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants AI agents did the dirty work, with hackers gaining privileged access in some en

    Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours https://www. theregister.com/security/2026/ 10/22/microsoft-says-connectwise-breach-let-…

  3. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying

    Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed https://www. theregister.com/cyber-crime/20 26/10/22/hackers-pile-on-php2shel…