Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
Excerpt
UPD 23.10.2026 : added rules for Kaspersky SIEM and events for developing custom detection rules or conducting threat hunting. UPD 22.10.2026 : added a description of how the Kaspersky Managed Detection and Response service detects the described malicious activity. UPD 22.10.2026 : added a description of how Kaspersky Vulnerability Management detects vulnerable versions of PHP. Vulnerability overview On October 20, 2026, the PHP security team published a preliminary notice…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-109618 | High | Score 83/100 | First seen |
| CVE | CVE-2026-109619 | High | Score 83/100 | First seen |
IOC Relationship Graph
Building graph…