Security Boulevard

php2shell in Practice: Exploitable, Conditional, and Hard to Mass-Exploit

Cutting Through the php2shell Noise On October 20, details of php2shell, two pre-auth RCE vulnerabilities in the PHP core ...
SC Media

PHP2Shell exploitation confirmed, but mass attacks remain elusive

While there were credible reports over the weekend of exploitation in the wild of the two PHP2Shell bugs that caused all the ...
InfoQ

PHP Patches Two Critical RCE Flaws That Were Already Under Attack

PHP released 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities allowing unauthenticated remote code ...

PHPにCVSS 9.2の重大CVE、アップグレードは済んだか？

昨日、PHPは2件の重大なリモートコード実行（RCE）脆弱性を公開した。CVE-2026-109618 と CVE-2026-109619 として追跡されているもので、CVSSスコアは9.2。公式の事前通知およびEU Computer ...
ecosistemastartup

Black October: IA destapa fallos críticos en PHP y GitLab

Qué es "Black October" y por qué debería preocuparte En unas 48 horas se concentraron decenas de divulgaciones críticas y ...
The Tech Edvocate

Explosive: Unauthenticated RCE Flaws in PHP Expose Millions — Here’s How to Fix Them NOW

Spread the loveOn October 21, 2026, the cybersecurity world collectively held its breath. Two critical remote code execution ...
The Tech Edvocate

The Silent Threat: 9 PHP Security Patches You Can’t Afford to Ignore After the PHP2Shell Crisis

Spread the love“`html The digital world felt a collective shiver recently, didn’t it? The sheer panic surrounding the ...

PHP: cos'è, a cosa serve, come funziona e come configurarlo su Windows e Linux

PHP è uno dei linguaggi fondamentali per lo sviluppo Web. La guida spiega come funziona, come installarlo e configurarlo su ...

What I did to migrate from PHP 7.4 to 8.2 without stopping production | Amazon Linux 2, AMI, and yum dependency errors

IntroductionIn October 2026, information regarding a critical security vulnerability in PHP was disclosed.The official PHP ...
tech2geek

PHP Security Update: Critical RCE Flaws Fixed in PHP 8.5, 8.4, 8.3, and 8.2

Two critical security vulnerabilities in PHP now have official patches, and website administrators should install them as soon as possible. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, ...
ShiftDelete.Net Global

Critical PHP2Shell Vulnerability Triggers Global Cybersecurity Warnings

Discover the critical PHP2Shell vulnerability affecting global web infrastructure. Learn what it means, its severe risks, and ...
Mezha

PHP After Critical RCEs: One of Ukraine’s Verified Government Websites Still Shows a 2015 Version

Mezha checked six Ukrainian government websites after PHP released fixes for two critical flaws. One disclosed PHP 5.4.45, ...