| Mobile Web

Search results for Php2Shell

AI & Enterprise

AI hacking era makes it time to switch from PHP to Rust or Go, developer warns

A recently rated critical Php2Shell vulnerability found in the PHP programming language has sparked concern, with warnings that it may be the start of deeper, long-standing problems. Developer Jan Kammerath, who has written PHP since 1999, said AI-driven security research is enabling renewed scrutiny of PHP and could make it hard for the language to endure. He cited design choices, cloud-era mismatches and fading cost advantages, and urged PHP developers to migrate applications gradually to Rust or Go.

AI & Enterprise

Genians says 96% of internal PHP devices exposed to PHP2Shell flaw

Genians said an analysis of device identification data accumulated on its cloud network access control platform showed 96% of devices running PHP on internal networks were exposed to the PHP2Shell vulnerability. It said 78% of vulnerable devices used PHP versions 8.1 or earlier, and 48% ran versions 5.x or earlier. It added 89% of identified devices were on private IP ranges that are difficult to access from the public internet.

Games & Commerce

U.S. government orders urgent patching after confirming exploitation of critical PHP flaws

The U.S. government confirmed that two critical security vulnerabilities in the PHP web development language are being exploited in real cyberattacks, and ordered urgent security updates for federal civilian agencies. The Cybersecurity and Infrastructure Security Agency added the flaws, known as PHP2Shell, to its catalog of known exploited vulnerabilities and set a deadline for patching. The vulnerabilities allow remote code execution without authentication on affected servers.