As cited
Copy frozen at (site build).
vulnerabilities
PHP2Shell Actively Exploited, US Cybersecurity Agency Warns
The US Cybersecurity and Infrastructure Security Agency (CISA) reports that critical PHP2Shell vulnerabilities are being actively exploited in the wild, prompting mandatory mitigation for federal civilian agencies. Researchers have linked North Korean threat actors to active scanning for these flaws, alongside other attackers.
Why it matters: Federal agencies and organizations running PHP must prioritize patching PHP2Shell immediately; nation-state actors are already scanning for and exploiting these critical flaws.
- First seen by Cybersecurity Tracker