CISA confirms PHP2Shell vulnerabilities now exploited in attacks

By Sergiu Gatlan · BleepingComputer · Tuesday, 27 October 2026 at 08:20 (40m ago) · Original article ↗

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The PHP vulnerabilities, both rated 9.2 on the CVSS scoring…

The Hacker News 4h ago

Security

Japanese virtual desktop cloud hacked so hard it asks to be banned

CEO admits service used for foreign exchange trading had holes company was slow to fix

The Register 8h ago

Security

iPhone Lockdown Mode: The pros and cons of enabling Apple's security feature

Lockdown Mode enables extreme protections for those most at risk, but it's overkill for most people.

Engadget 9h ago

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

More Security & Privacy

CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution

Japanese virtual desktop cloud hacked so hard it asks to be banned

iPhone Lockdown Mode: The pros and cons of enabling Apple's security feature