#PHP2Shell has everyone rattled this week. Here is the calm version. Two critical flaws in PHP itself. Fixes…
usama R. — Cybersecurity | Web Application Penetration Tester | Vulnerability Assessment | OWASP Top 10 | Burp Suite Professional
Reshared from a post by Nikki W.
#PHP2Shell has everyone rattled this week. Here is the calm version.
Two critical flaws in PHP itself. Fixes are out. The National Cyber Security Centre says patch now.
Most teams will update the servers they know about.
The breach risk sits in the ones they don’t. The forgotten booking page. The old portal nobody owns. Anything still on PHP 8.1, which gets no fix at all.
Patching is step one. Proving you got everything is what lets you sleep.
Our 4-step plan is in the comments.
#PHP2Shell #CyberSecurity #NCSC #UKBusiness
https://c360red.com/php2shell-no-need-to-panic-heres-your-plan/
2 reactions · 0 comments