CISA confirms PHP2Shell under attack as researchers clock successful exploits
CISA has confirmed active exploitation of two critical PHP2Shell vulnerabilities and set an October 29 deadline for federal agencies to patch the bugs rated 9.2 on the CVSS scale.