PHP - DIESEC

PHP2Shell Vulnerability: The Flaw Is in PHP Itself

By Editorial Team | October 28, 2026

PHP2Shell vulnerability: a stack of three black stone blocks, the bottom one cracked with a thin line of blue light

We have covered PHP2Shell twice already: in our post of 21 October and in our Top 5 of 23 October. A week after PHP shipped its emergency patches, this is a closer look at the PHP2Shell vulnerability: what the flaw is, what turned out to matter, and what is still worth checking this week. Two…

Top 5 Cybersecurity News

By Editorial Team | October 23, 2026

This week’s Top 5 Cybersecurity News for October 23, 2026 is about time. Attackers needed hours, and in one case started four days before public disclosure. Recovery asked for days: restores from clean backups, rotated credentials, client updates and, at one grocery group, more than a week without e-commerce. A flaw in PHP, the language…

PHP Critical Vulnerabilities Leaked Before Patch

By Editorial Team | October 21, 2026

Seven padlocks on a steel rail, three rusted and four brass, one with a blue tag, under the headline Critical PHP Flaws Leaked Before the Patch

Two critical PHP vulnerabilities leaked before their patch, early attacks are reported, and the EU’s CERT says internet-facing applications may need to be isolated until it is installed. PHP’s security team released the fix on October 21 at 14:00 UTC (16:00 CEST). Both flaws are rated CVSS v4.0 9.2, and researchers report remote code execution.…