PHP2Shell: What watchTowr Reports About Active Attacks
watchTowr dates its PHP2Shell attack observations to 21 October. Its evolving FAQ shows how patch advice changed during disclosure.
1 min read3 min listen
Cybersecurity
Software vulnerabilities, security research and the work of keeping your applications safe.
Posts
PHP2Shell: How AI Helped Build Working Exploits
Samuel Allen Alexander discusses Wiz’s PHP research and the repeated testing AI helped with when adapting exploits to different server environments.
2 min read4 min listen
PHP2Shell on Google Cloud: Who Has to Redeploy?
App Engine Standard can receive PHP fixes automatically. App Engine Flexible and customer-owned images still need deployment work.
2 min read4 min listen
PHP2Shell: Could a Quick Fix Leave Your Site Exposed?
Eric Parker examines an unofficial proof of concept and the configuration advice circulating before PHP released its security updates.
2 min read3 min listen
PHP2Shell: Which PHP Security Update Does Your Site Need?
PHP’s maintainers explain the memory bugs, the demonstrated attacks and why configuration workarounds leave some paths to code execution open.
2 min read4 min listen