security Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers Snoops 'likely still' have access to US government-affiliated network
cyber-crime CISA confirms PHP2Shell under attack as researchers clock successful exploits Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
security UK pentester 'killa' claims $2K Bitcoin prize in PHP2Shell capture-the-flag contest Jaydip Modhwadia beats challenge designed to test real-world exploitability of PHP2Shell in around 3 hours
security We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue What better way to celebrate Cybersecurity Awareness Month than warning that three-quarters of the web is about to be set on fire?
columnists PHP2Shell is a warning shot for vulnerability disclosure Keeping secrets is difficult in an open world, but we've done it before and must do it again
security There's a third PHP2Shell bug, but it won't get an emergency fix Bad things (and software bugs?) come in threes
security PHP2Shell exploit bypasses protections designed to stop remote code execution “Adversaries are clearly spending time (and tokens) on this bug,” researcher says.
security PHP2Shell puts dozens of UK government services out of service Ministers report 32 unavailable and four partly disrupted, but no confirmed compromise
cyber-crime Hackers pile on PHP2Shell as AWS reveals attacks began before disclosure Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
security PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk 'Coordinated vulnerability disclosure, unless there's evidence of active exploits in the wild,' Chainguard CEO tells The Reg
security PHP devs publish critical bug fix as site owners warned: Pull 'em offline if you're unpatched Websites down as precaution as exploits have already been published
