PHP

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Incident Response, PHP, PHP2Shell, security product vulnerability, security products, Vulnerabilities /

Tech and Security Companies Respond to PHP2Shell Vulnerabilities 2026-10-22 at 15:20 By Eduard Kovacs Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Tech and Security Companies Respond to PHP2Shell Vulnerabilities Read More »

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, PHP, PHP2Shell, scanner, Searchlight Cyber, software /

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 2026-10-22 at 15:03 By Mirko Zorz Searchlight Cyber released php2shell-scanner, an open-source tool that tests whether a host is exposed to CVE-2026-109618 and CVE-2026-109619, the pair of PHP remote code execution bugs patched on October 21. PHP2Shell lets an attacker reach pre-auth RCE against PHP […]

New PHP2Shell scanner checks your hosts for CVE-2026-109618 and CVE-2026-109619 Read More »

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Cisco, cybersecurity, Don't miss, Fortinet, Hot stuff, News, Palo Alto Networks, patch, PHP, security update, VulnCheck, vulnerability, vulnerability management /

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers 2026-10-22 at 13:22 By Mirko Zorz Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell, a pair of critical PHP vulnerabilities that let an attacker run code on a web server without logging in. Palo Alto has […]

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers Read More »

PHP2Shell Exploitation Started Days Before Patches

exploited, Featured, PHP, PHP2Shell, Vulnerabilities /

PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Exploitation Started Days Before Patches Read More »

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Cloudflare, CVE, CVSS, cybersecurity, Don't miss, Hot stuff, News, patch, PHP, security update, UK NCSC, vulnerability /

PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]

PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

Featured, PHP, RCE, Vulnerabilities, vulnerability /

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws 2026-10-21 at 11:02 By Ionut Arghire Tracked as CVE-2026-109618 and CVE-2026-109619, the bugs could potentially lead to unauthenticated remote code execution. The post PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws Read More »

A critical PHP security release is coming today, so get ready to update!

News, PHP, security update, vulnerability /

A critical PHP security release is coming today, so get ready to update! 2026-10-21 at 07:21 By Mirko Zorz The PHP security team has announced an urgent security release for Wednesday, 21 October 2026 at 14:00 UTC. The release fixes two vulnerabilities, each rated 9.2 (Critical) under CVSS v4.0. The notice doesn’t yet describe the […]

A critical PHP security release is coming today, so get ready to update! Read More »

Mass Exploitation of Critical PHP Vulnerability Begins

exploited, Malware & Threats, PHP /

Mass Exploitation of Critical PHP Vulnerability Begins 2025-03-10 at 14:02 By Ionut Arghire GreyNoise warns of mass exploitation of a critical vulnerability in PHP leading to remote code execution on vulnerable servers. The post Mass Exploitation of Critical PHP Vulnerability Begins appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Mass Exploitation of Critical PHP Vulnerability Begins Read More »

PRevent: Open-source tool to detect malicious code in pull requests

Apiiro, code analysis, Don't miss, GitHub, Hot stuff, Java, JavaScript, Kotlin, News, open source, PHP, programming, Python, Ruby, software development, threat detection /

PRevent: Open-source tool to detect malicious code in pull requests 2025-02-20 at 16:52 By Zeljka Zorz Apiiro security researchers have released open source tools that can help organizations detect malicious code as part of their software development lifecycle: PRevent (a scanner for pull requests), and a malicious code detection ruleset for Semgrep and Opengrep static […]

PRevent: Open-source tool to detect malicious code in pull requests Read More »

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

CVE, Devcore, Don't miss, exploit, Hot stuff, Imperva, News, PHP, Ransomware, vulnerability, WatchTowr, Windows /

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577) 2024-06-13 at 15:01 By Zeljka Zorz An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Imperva says the attacks started on June 8, two days after the PHP development team pushed out fixes, and one […]

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577) Read More »

Ransomware Group Exploits PHP Vulnerability Days After Disclosure

exploited, Featured, PHP, Ransomware /

Ransomware Group Exploits PHP Vulnerability Days After Disclosure 2024-06-12 at 12:16 By Ionut Arghire The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure. The post Ransomware Group Exploits PHP Vulnerability Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View […]

Ransomware Group Exploits PHP Vulnerability Days After Disclosure Read More »

PHP Patches Critical Remote Code Execution Vulnerability

PHP, Vulnerabilities /

PHP Patches Critical Remote Code Execution Vulnerability 2024-06-10 at 16:31 By Ionut Arghire PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers. The post PHP Patches Critical Remote Code Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View […]

PHP Patches Critical Remote Code Execution Vulnerability Read More »

Scroll to Top