SignalPost

← Stories

PHP2Shell Flaws Spark Global Web Security Scramble

Two critical PHP vulnerabilities, later followed by a third flaw that PHP chose not to rush-patch, prompted a worldwide effort to protect websites from hackers, with coverage also highlighting AI's role in making such bugs easier to exploit and the underfunded state of the PHP Foundation.

9newsrooms
14articles
3.8 daysrunning
Oct 23first seen

Ask Scout

Scout answers questions about this story using only the coverage below.

Coverage over time

Oct 23 1 PM: 5 articlesOct 25 1 PM: 6 articlesOct 26 1 PM: 3 articlesOct 23 1 PMOct 27 7 AMpeak 6 per day

Articles

Oct 27, 7:45 AM theregister.com CISA confirms PHP2Shell under attack as researchers clock successful exploits
Oct 27, 7:40 AM techcrunch.com US government says hackers are now exploiting critical PHP web bugs
Oct 26, 4:00 PM yro.slashdot.org PHP2Shell Security Flaws Now Successfully Exploited
Oct 26, 7:00 AM techradar.com Experts reveal another major PHP2Shell bug — and it's not getting an emergency patch this time
Oct 26, 6:14 AM theregister.com We shouldn't be surprised about the PHPocalypse, as the internet is built on sticks and glue
Oct 26, 4:50 AM tomshardware.com Lack of staff and funding likely led to the recent PHP security snafu; project has only one full-time employee, but that's just the tip of the iceberg
Oct 26, 4:25 AM thenextweb.com PHP warns of a third PHP2Shell flaw but won’t rush out a fix
Oct 26, 3:30 AM tomshardware.com Bitcoin reward offered to anyone who could break into an unpatched server running PHP, hacker cracks site and claims bounty
Oct 26, 1:00 AM theregister.com PHP2Shell: No login, no app code, no warning. What next?
Oct 24, 8:30 AM techcrunch.com PHP-ocalypse: How two critical web bugs almost broke the internet
Oct 24, 5:00 AM wired.com The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Oct 23, 10:45 PM techmeme.com The PHP Foundation, which coordinated fixes for two critical PHP flaws, operates on a shoestring budget with one full-time staff member and 14 contractors (Toby Sterling/Reuters)
Oct 23, 5:00 PM wsj.com AI Hacks Are Coming Thick and Fast and Overwhelming the Internet
Oct 23, 1:04 PM theregister.com There's a third PHP2Shell bug, but it won't get an emergency fix