security2 hours ago
PHP2Shell Flaws Prompt Emergency Patches as AI-Driven Exploits Threaten 70% of Web Servers
PHP maintainers released emergency updates for two critical remote code execution vulnerabilities, dubbed 'PHP2Shell,' affecting nearly all web servers. The flaws, identified by AI, allow unauthenticated attackers to execute code, with patches available for PHP 8.2 through 8.5. Security experts urge immediate updates, as Cloudflare has deployed WAF rules and the UK's NCSC advises taking unpatched systems offline.