Understanding PHP2Shell vulnerabilities and reducing risk while you patch
By Aamir Lakhani, Global Director of Threat Intelligence and Adversarial Artificial Intelligence Research, Fortinet
Two critical PHP vulnerabilities disclosed this week pose an urgent security and business continuity risk for organisations that depend on websites, customer portals, and other web applications. Collectively known as PHP2Shell, these flaws may let an unauthenticated attacker execute code on an affected server, potentially exposing sensitive information and disrupting services.
PHP2Shell’s impact is incredibly broad, spanning industries, including products in the cybersecurity sector. For organisations running PHP applications, remediation requires coordination across security, application, and infrastructure teams. Updating the underlying software may require compatibility testing, maintenance windows, and service restarts, which can delay patch application. FortiGuard Labs is helping organisations reduce exposure during this process with vulnerability guidance and virtual patching protections. You should apply PHP security updates as soon as you can safely do so, using interim controls during deployment.
Understanding PHP2Shell and Its...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
