Enterprise
PHP2Shell: Haven’t patched yet? Take these steps now to mitigate
The PHP Project has released mitigation steps for RCE exploits in PHP, offering interim protection for users who haven't yet applied patches.
Topic
#Vulnerability
Stories tagged by our AI curator.
Enterprise
Cloudflare sees millions of attempts to exploit critical PHP flaws
Cloudflare has detected millions of exploitation attempts targeting two critical PHP vulnerabilities since public disclosure.
Also covered by 1 other outlet
Enterprise
PHP security flaw: India activates emergency response; takes apps offline amid a global alert
India activated emergency cybersecurity measures after critical PHP flaws affecting 70% of internet applications were discovered, prompting banks to audit systems and patch government websites.
Enterprise
PHP2Shell attacks began four days before patches, Amazon says, as attempts hit millions
Critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were exploited by attackers four days before patches were released, with exploit attempts reaching millions according to Cloudflare observations.
Also covered by 1 other outlet
Enterprise
PHP2Shell puts dozens of UK government services out of service
Two critical PHP vulnerabilities have forced 32 UK government services offline and partially disabled four others, with similar disruptions affecting government websites across Europe and Australia.
Enterprise
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon warned that hackers exploited a critical PHP vulnerability four days before public disclosure, with broad exploitation now underway across systems worldwide.
Enterprise
PHP: The three little letters wreaking havoc across the web
Two critical vulnerabilities in PHP, which powers about 70% of websites, have exposed millions of sites to attacks and forced offline some high-profile platforms including the Internet Archive and DeviantArt.
Enterprise
AI found a critical PHP flaw. The bigger failure began in 2024.
Two critical PHP flaws (CVE-2026-109618, CVE-2026-109619) prompted widespread outages, but broader concerns center on the handling of coordinated disclosure and pressure on open-source maintainers as AI accelerates exploit discovery.
Enterprise
Websites across world hit by millions of attempts to exploit PHP code flaw
A critical vulnerability in PHP, which underpins 70% of websites, has triggered millions of exploitation attempts globally and prompted government and company websites to go offline for patching.
More Tech
No, the internet isn't dying due to 'one of the most significant vulnerabilities of 2026' - but this is what you need to know
TechRadar clarifies claims about a major internet vulnerability reportedly tied to 2026, explaining what actually warrants concern.
Enterprise
Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure
Attackers are exploiting critical PHP2Shell vulnerabilities in massive numbers, with millions of attempts recorded since disclosure, and evidence suggesting attacks began before public announcement.
Enterprise
GitLab warns of new max severity code execution vulnerability
GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that allows remote attackers to execute arbitrary code on vulnerable servers.
Enterprise
How computer language flaws found using AI could impact 70% websites; CERT-In issues critical alert
Critical PHP security flaws affecting 70% of websites prompted government shutdowns across multiple countries; CERT-In issued an alert.
Enterprise
CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
CISA is warning that attackers are actively chaining four Plex Media Server vulnerabilities in 'Plex2Shell' attacks to breach servers.
Enterprise
PHP knew about one of the flaws in 2024 but could not agree a fix
The PHP Foundation disclosed that it discovered one of two critical flaws in 2024 but took months to agree on a fix before this week's patches.
Enterprise
A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse
Security researchers discovered a design flaw in Meta's Muse AI assistant's share links that exposed users' personal conversations, prompting the company to suspend the feature.
Enterprise
Palo Alto's firewall OS has been under attack from multiple ransomware groups since June
Ransomware groups including Qilin and Inc have been actively exploiting a high-severity authentication bypass vulnerability in Palo Alto Networks' PAN-OS since June across multiple industries.