[Security Blog] HKCERT Warns of Critical “PHP2Shell” Vulnerabilities: Businesses Must Immediately Review and Patch PHP Systems AI Accelerates Cyber Attacks and Defence, Further Shortening the Response Window Between Vulnerability Disclosure and Exploitation

Our takeHKCERT warns of two critical PHP vulnerabilities dubbed PHP2Shell; Amazon detected exploitation attempts four days before disclosure. No technical mechanism for any AI acceleration has been disclosed. Patch affected PHP systems immediately.Security Resilience desk

Sources (3)

hkcert · hkcert
infosec_mag · infosec_mag
securityweek · securityweek

What this means for you — Security leader:Review all internet-facing PHP applications for the two PHP2Shell CVEs immediately and apply available patches; no mechanism has been disclosed for the AI-assisted exploitation claim.

What this means for you — Lean IT orgs:Check any web servers or websites you run that use PHP and install security updates right away if available; if unsure what to do, contact your website host or IT support today.

What this means for you — MSP:Scan all client environments for internet-exposed PHP instances, prioritize patching the PHP2Shell vulnerabilities, and confirm detection rules are deployed.

What this means for you — Researcher:HKCERT and multiple vendors confirm active exploitation of the PHP2Shell vulnerabilities began at least four days before disclosure; vendors are releasing detections and patches.