PHP2Shell: Haven't patched yet? Take these steps now to mitigate - ZDNET:
The PHP Project provides instructions to stop further RCE exploits in limited ...
zdnet.com/tech/php2shell-php-patch-mitigation-critical-exploit/
Similar to This
Previous
PHP2Shell security flaws now sucessfully exploited in the wild: Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as ...
bleepingcomputer.com/news/security/php2shell-security-flaws-now-sucessfully-exploited-in-the-wild/
Will AI expose the rickety infrastructure of the internet?: The moment you realize the internet is "held together by glue and dreams."
techcrunch.com/2026/10/24/will-ai-expose-the-rickety-infrastructure-of-the-internet/
dlvr.it Oct 23
There's a third PHP2Shell bug, but it won't get an emergency fix: Bad things (and software bugs?) come in threes
theregister.com/security/2026/10/23/theres-a-third-php2shell-bug-but-it-wont-get-an-emergency-fix/5305208
PHP shares mitigation for new RCE vulnerability with no patch: The PHP security team has shared mitigation measures for a new remote code execution vulnerability ...
bleepingcomputer.com/news/security/php-shares-mitigation-for-new-and-unpatched-rce-vulnerability/
The biggest-ever internet security threat has been known for 22 years. AI made it a crisis in 2 days
edition.cnn.com/2026/10/23/tech/ai-cybersecurity-php2shell-explained
The Man Who Saved the Internet Yestersday: Ondřej Surý was a relatively anonymous volunteer working on PHP security. Then the internet exploded.
theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/
Hacking attempts surge as websites race to patch PHP issues: A cloud firm says millions of hacking attempts have been made since critical vulnerabilities were ...
abc.net.au/news/2026-10-23/php-vulnerabilities-ai-hacks-surge/107299204
PHP vulnerability: CTO describes stress over cyber risk: A CTO shares what it was like to go 48 hours without sleep as he dealt with the PHP security flaw — and ...
businessinsider.com/php-vulnerability-cto-stress-cybersecurity-fix-2026-10
channelnewsasia.com Oct 22
Cloudflare sees millions of exploit attempts after PHP disclosure: Cloud services firm Cloudflare saw millions of exploitation attempts after the public ...
channelnewsasia.com/world/cloudfare-hack-exploit-attempts-php-websites-6481421
ABS down, ‘millions of websites’ affected: Australian government websites including that of the country’s own cyber defence agency and the ABS were among ...
news.com.au/technology/online/security/php-security-flaw-government-websites-pulled-offline-globally/news-story/d90e9055a61892391388b4630467e53f
PHP ships emergency patches for critical PHP2Shell flaws: The PHP security team released emergency security patches for two critical remote code execution (RCE) ...
bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/
WIRED Oct 21
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/
PHP rushed emergency patch after critical RCE flaws leaked online
neowin.net/news/php-rushed-emergency-patch-after-critical-rce-flaws-leaked-online/
Websites taken offline in race to patch PHP security flaw: Government security agencies warn companies to take immediate action after AI uncovers widespread ...
ft.com/content/d438af1e-a48c-4aeb-8c84-00cdb5e741e3
Paid articlePaywall
Nasty bug with very simple exploit hits PHP just in time for the weekend: With PoC code available and active Internet scans, speed is of the essence.
arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/
Next