Leadership

How likely is successful mass exploitation of PHP2SHELL?

Never in a high alert scenario should be try and be too solid with our predictions, because this game is difficult! but given PHP2SHELL day is such a mad day, I’m going to break my typical model, however:

Personal view: this is a HIGH ALERT scenario but not an ACTIVE EXPLOITATION scenario (at the time of writing), so this is SERIOUS and requires paying attention to!

but the question, how likely is this to lead to mass exploitation? is there REAL tough and serious question we have to ask when considering the wider landscape of national security etc. so I’m going to at least explore it a bit!

Read more “How likely is successful mass exploitation of PHP2SHELL?” →
Leadership

Upgrading to PHP 8.5.12 Backports

Ok so, some fun notes:

Cloudflare deployed blocking rules at about 1500 today!

Ubuntu back ported the fixes so this server is now patched!

The world, so far hasn’t ended!

Pwndefend stayed online, whilst many others… did not! That speaks volumes for their defence in depth perhaps….

Let’s see where this PHP cyber journey will go!

Threat Intel

Vulnerabilities in PHP (CVE-2026-109618 / CVE-2026-109619)

Another day, another vulnerability, as has been so… for basically forever. However if you run PHP you don’t want to sleep on this one, due to some shenanigans there’s been an ‘early release of intel’ (leak) and a patch for PHP is on the way, however there’s also now a PoC in the wild! But the devil, as always is in the details! So let’s explore those, as always this is a fast publish and you should look to the vendor for guidance etc. with that important caveat aside, let’s explore:

Read more “Vulnerabilities in PHP (CVE-2026-109618 / CVE-2026-109619)” →