Enky Whitehat has released a vulnerability diagnostic scanner to check for the presence of PHP2Shell, a high-risk PHP core remote code execution flaw, the company said on Thursday. The tool identifies PHP versions and related configuration settings without using actual attack code to make an initial assessment of asset risk. The company also published an analysis report covering technical details, affected systems and versions, mitigation steps and patch guidance.

Security concerns are spreading after vulnerabilities were found in widely used internet software, including PHP, the Node.js JavaScript runtime and the open-source proxy LiteLLM. Anxiety has grown after a critical flaw was discovered in PHP, prompting some countries to block websites when patches are difficult or impossible. Reports also say hackers began seeking targets days before fixes. Separately, AI-focused hacking attempts are increasing, with attacks using AI agents reported across multiple regions and industries.