According to a recent LinkedIn post from Hacktron, the company’s “Black October” review highlights exploitation attempts against several software vulnerabilities shortly before or after public disclosure. The post covers PHP2Shell, HTTP2Shell, Plex2Shell, a GitLab-related flaw, and compromised eMudhra certificate keys.
The post reports that PHP2Shell was used in an attempted campaign against PAN-OS firewalls, while HTTP2Shell activity against Node.js did not result in a confirmed compromise. Plex2Shell exploitation led to crypto-mining and proxy malware, and GitLab-related attacks continued despite upgrades where the underlying fix required an Alpine Linux image rebuild.
Hacktron’s review also notes that eight eMudhra certificate keys were recoverable and are no longer trusted by browsers, with no malicious use confirmed. Its broader warning is that patching may not remove earlier intrusions, while overlooked software components embedded in firewalls or container images can leave organizations exposed.
For investors, the examples underscore persistent demand for vulnerability discovery, asset visibility, incident response, and verification that fixes reach all affected systems. The activity could support the strategic relevance of cybersecurity providers such as Hacktron, although the LinkedIn content does not quantify any direct effect on the company’s revenue, costs, or financial outlook.