CISA confirms PHP2Shell under attack as researchers clock successful exploits
What's happening
CISA has added the two critical PHP vulnerabilities to its exploited-by-hostile-actors list after researchers reported working exploits and shells, with multiple outlets saying the bugs affect PHP code that powers roughly 70% of websites. Companies and platforms including Wikipedia, WordPress and others were reported temporarily taken offline while organizations scrambled to patch. Researchers timed successful exploit attempts and infosec professionals confirmed that attackers are getting remote shells. The story has spurred broad warnings about a larger 'vulnpocalypse' risk across aging internet code.
Why it's trending
Evidence of live, successful exploits plus CISA confirmation pushed the PHP bugs from a patching emergency into an active attack story right now.
SignalHolding at its usual pace, confirmed across 2 independent source types.
Story volume
Stories per dayAngles you could write
If you think your CMS is safe because you run the latest plugin, you're wrong, CISA says PHP2Shell is being exploited and attackers already have working shells, so 'latest plugin' is not a plan.
+2 more angles for this topic with an account — all it takes is your email.
Original sources15
- Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]
TechCrunch AIOct 28 - The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO
The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities could be patched. According to researchers who found the […]
TechCrunch AIOct 28 - Cybersecurity people are losing their minds today. Some are calling it Black October and expect internet lockdowns soon
List of incidents: PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. California: data on every public school student since 2023 stolen, including disability status Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers Zeab
r/OpenAIOct 22
+12 more sources for this topic
Create an account to follow the full coverage in the live radar.
More rising in AI & Tech
- Google announces Gemini 4 Carbon, its latest frontier AI model that you can't useSurging6.0Surging6.0 momentum
- Google alters its cloud playbook, enlisting partners to sell more AI chipsClimbing2.3Climbing2.3 momentum
- Google admits AI search makes less money, but it's fixing that with more adsClimbing2.8Climbing2.8 momentum
- AI chip boom tripled South Korea's economic growth in the third quarterSteady1.0Steady1.0 momentum
- AI 'hacker' finds 4 severe bugs in popular industrial control software in under 4 hoursSteady0.7Steady0.7 momentum
- Anthropic IPO warns its AI could blackmail people, become sentient, end humanityClimbing2.8Climbing2.8 momentum