TOPICS / 2 STORIES
PHP Security
Every Pandromeda story on PHP Security: news, explainers, comparisons and guides, newest first.
PHP2Shell Attacks Are Underway: What Unpatched Servers Face Now
Days after PHP patched two critical php2shell RCE flaws, Sophos, Tanium and watchTowr report real exploitation attempts against unpatched servers.
PHP Ships Emergency Patches for Critical PHP2Shell RCE Flaws
PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35 fix two critical, unauthenticated RCE flaws rated CVSS 9.2 that hit almost every PHP web server. Patching is the only real fix.