What PHP2Shell Does – A Bartender Analogy
2 points, 0 comments on Hacker News
#php
Page 2 of 5 — 115 headlines
Japan to set up AI hacker team as PHP flaws knock services offline
Japan plans to create a team of ethical hackers that will use AI to attack the country’s own systems and find vulnerabilities before criminals can exploit them. The announcement comes as banks, rail operators and government agencies take online services offline to patch two critical flaws in PHP...
Running the Patched PHP 8.3.36 on Ubuntu 20.04 Servers with Docker
1 points, 0 comments on Hacker News
PHP2Shell (CVE-2026-109618): Zero-Downtime Mitigations and Upgrade Runbook
3 points, 0 comments on Hacker News
PHP2Shell (CVE-2026-109618) Exploit
2 points, 0 comments on Hacker News
PHP Ships Fixes for Two Critical Unauthenticated-RCE Flaws
The PHP project released versions 8. 5. 12, 8.
Two days between warning and patch: how the PHP project handled CVE-2026-109618
Two days between warning and patch: how the PHP project handled CVE-2026-109618 The PHP project pre-announced its October 2026 security release on 20 October and published fixes on 21 October. For two vulnerabilities rated 9. 2 under CVSS v4.
PHP2Shell Needs One HTTP Request. OpenNHP Never Lets It Arrive
1 points, 0 comments on Hacker News
PHP situation 24h later [video]
1 points, 0 comments on Hacker News
The PHP exploit simply explained [video]
5 points, 0 comments on Hacker News
CVE-2026-109619 PHP Sentinel
1 points, 2 comments on Hacker News
PHP2Shell Services
1 points, 0 comments on Hacker News
ClaudeCode skill to easily protect your website from the PHP2Shell bug
1 points, 0 comments on Hacker News
Is the Internet Safe Again After the PHP Nightmare? What You Need to Know
PHP shipped its fix, attackers launched millions of attempts, and governments say no one has broken in yet. Here's what that means for your passwords, your crypto, and your browsing.
Hackers appear to be struggling to exploit PHP flaws after global cybersecurity crisis
There were few, if any, reports of widespread damage by hackers exploiting PHP flaws, experts said, one day after officials warned of severe vulnerabilities.
Memory Safe PHP
1 points, 0 comments on Hacker News
Here's how to protect your information from the PHP flaw, according to cybersecurity pros
Cybersecurity researchers say the PHP vulnerability has repercussions for normal people, too. They have some advice.
PHP2Shell dropped, so we had agents replace a client's Drupal site overnight
1 points, 1 comments on Hacker News
CVE-2026-109618 and CVE-2026-109619 (PHP2Shell): Patch PHP Now
TL;DR: On 21 October 2026, PHP released emergency updates for CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities known together as PHP2Shell. Both are scored CVSS 9. 2 and can allow unauthenticated remote code execution on any server handling web requests with PHP.
What to know about the PHP bug affecting 70% of world's websites
AI was used to uncover a security weakness that affects most of the world's websites, researchers said. Here's what internet users should know.
PHP Attacks: AI Giveth Global Cyber Security, AI Taketh Global Cyber Security
Developing story — details emerging. Check the source link for the latest updates.
Php2shell is not exploitable in real production enviroment
2 points, 1 comments on Hacker News
AI found a critical PHP flaw. The bigger failure began in 2024
1 points, 0 comments on Hacker News
The PHP bug marks a dangerous new era for the internet. OpenAI’s poised to cash in
OpenAI helped lead the disclosure of a critical issue that could take down 70% of the web. It's also selling tools it says will help prevent this—and similar issues—from happening.