CISA confirms PHP2Shell vulnerabilities now exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency added PHP2Shell vulnerabilities to its catalog of actively exploited security flaws, indicating real-world attacks are underway. Federal agencies have been ordered to implement patches immediately to defend against this threat.
Key points
- PHP2Shell vulnerabilities are confirmed to be actively exploited in attacks
- CISA issued urgent patching mandate for federal agencies with Thursday deadline
- Vulnerability added to CISA's catalog of known exploited security flaws
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
