“The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response

The PHP panic has not turned to patching: And that’s bad news, capital B, as PHP2Shell attacks ramp up. We The post “The panic hasn’t turned into patching”: What security researchers really think about the PHP2Shell response appeared first
Read the original at The New Stack ↗Also reported by 5 other newsrooms
Hacker NewsTailscale SSH: Investigation and remediation updateTechRadarMicrosoft and others scramble to patch 'HTTP2Shell' flaw which could be the next PHP-level issue — Node.js problem may also affect mThe RegisterCISA confirms PHP2Shell under attack as researchers clock successful exploitsBleepingComputerCISA confirms PHP2Shell vulnerabilities now exploited in attacksThe Hacker NewsCISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution