PHP2Shell attacks surge as Potassium botnet targets vulnerable servers

“viable and very serious.” — John Hultquist, Google, quoted by The Record . Why a DDoS botnet worries hosting and crypto operators The wider threat is already substantial. Cloudflare recorded 935 DDoS attacks exceeding 1 terabit per second during the first half of 2026. Those attacks were not attributed to Potassium. Still, they illustrate the disruption facing hosting providers, payment processors and crypto platforms. No financial losses have been linked to PHP2Shell. PHP’s new advisory and what to watch On October 23, PHP disclosed another issue, CVE-2026-115560, involving an unusual application configuration. Pending a regular fix, it recommends session.upload_progress.enabled=0, also a mitigation for CVE-2026-109619. Administrators should install PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, restart workers and monitor suspicious downloads.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.