Millions of PHP2Shell attempts so far, but officials see no break-in
The Next Web
Read the full articleSince the public disclosure of the PHP2Shell vulnerability, hackers have launched millions of exploitation attempts, but officials in Germany, the Netherlands, Japan, and the US report no confirmed successful breaches. The flaw appears more complex to exploit than initially expected, prompting urgent calls for patching from governments and organizations. Several Japanese banks and service providers temporarily suspended online services as a precautionary measure.

- Hackers got a four-day head start on epic PHP2Shell vulnerability· Ars Technica
- AI found a critical PHP flaw. The bigger failure began in 2024.· The New Stack (AI)
- Why governments pulled websites offline over the decades-old PHP programming language· 3 sources
- PHP knew about one of the flaws in 2024 but could not agree a fix· The Next Web


