“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response
The New Stack (AI)
Read the full articleDespite the critical PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 with a high CVSS score of 9.2, over 90% of PHP-based servers remain unpatched five days after disclosure, leaving millions of websites exposed to attacks.
- Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces· The Hacker News
- CISA confirms attackers are exploiting both PHP2Shell flaws· The Next Web
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges· The Hacker News
- PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity· The Hacker News
- Will AI expose the rickety infrastructure of the internet?· TechCrunch
- AI is finding software flaws faster, and so are hackers: Inside the PHP scramble· 2 sources