22 OCT 2026
PHP2Shell: five days of attacks on a flaw nobody could patch
Two flaws in PHP's core allow unauthenticated remote code execution on any version since 5.4. What it means, whether it touches you, how to mitigate it and how to tell if someone already got in.