CISA Confirms Active Exploitation of Critical PHP2Shell Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed active exploitation of two recently patched PHP2Shell flaws by adding them to…

IT teams must immediately review whether PHP2Shell is deployed in production and apply available patches with highest priority. Monitor for suspicious network traffic targeting PHP2Shell installations and consider isolating unpatched systems until updates can be deployed.