Saugumo įmonės patvirtina PHP2Shell pažeidimus po pataisų išleidimo

39 šaltiniai
  • Palo Alto Networks ir Trail of Bits penktadienį patvirtino įsilaužimus ir tolesnę užpuolikų veiklą, susijusią su PHP2Shell, pranešė TechCrunch.
  • Dvi spragos įvertintos 9,2 balo iš 10 ir leidžia vykdyti nuotolinį kodo vykdymą be prisijungimo; PHP trečiadienį išleido pataisytas versijas po to, kai buvo pažeistas embargas.
  • Cloudflare užfiksavo milijonus bandymų pasinaudoti spragomis, o MUFG ir Wikimedia atsargumo sumetimais laikinai išjungė kai kurias paslaugas.
Šaltiniai (39)
  1. 1 PHP-ocalypse: How two critical web bugs almost broke the internet | TechCrunch techcrunch.com
  2. 2 News Archive - 2026 www.php.net
  3. 3 Technical Advisory: PHP2Shell Pre-Auth RCE (CVE-2026-109618, CVE-2026-109619) www.bitdefender.com
  4. 4 PHP2Shell Exploitation Started Days Before Patches - SecurityWeek www.securityweek.com
  5. 5 AI Exposes Decade-Old PHP Flaws, Sparking Shutdowns Across Japan International News Center world.storm.mg
  6. 6 PHP: What is it and why did it spark a global cyber security scramble? www.bbc.co.uk
  7. 7 PHP2Shell Crisis: 2 Critical Flaws Put 70% of Websites at Risk - teleSUR English www.telesurenglish.net
  8. 8 Critical Vulnerabilities in PHP www.csa.gov.sg
  9. 9 Cloudflare sees millions of attempts to exploit critical PHP ... thenextweb.com
  10. 10 Factbox-Governments, companies take websites offline over PHP flaws rmb.reuters.com
  11. 11 Three Critical Cybersecurity Threats Put Web Applications, Digital Trust and AI Infrastructure at Risk: Aquila I Advisory www.indianstartuptimes.com
  12. 12 Impossible-to-Apply Patches: How AI Is Redefining Cybersecurity www.redhotcyber.com
  13. 13 AL26-026 - Critical vulnerabilities impacting PHP - CVE- ... www.cyber.gc.ca
  14. 14 [PDF] Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 unit42.paloaltonetworks.com
  15. 15 PHP2Shell - Wikipedia en.wikipedia.org
  16. 16 GitHub - hkoeck/php2shell-status: PHP2Shell (CVE-2026-109618/109619) vendor and Linux distro status - AI-generated, verify before acting github.com
  17. 17 php2shell/README.md at main - GitHub github.com
  18. 18 php2shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) github.com
  19. 19 PHP flaws draw millions of hacking attempts amid global push for fixes www.nextgov.com
  20. 20 「PHP2Shell」脆弱性公表後に悪用試行が数百万件単位に増加したとCloudflareが報告、顧客向けには新ファイアウォールを開発して有効化 gigazine.net
  21. 21 cryptonews.net › news › securityCloudflare CEO Reports Millions of PHP2Shell Exploit Attempts cryptonews.net
  22. 22 Hackers pile on PHP2Shell as AWS reveals attacks began ... www.theregister.com
  23. 23 PHP: The three little letters wreaking havoc across the web www.theverge.com
  24. 24 PHP2Shell ‘more complicated than expected to exploit’, BSI says thenextweb.com
  25. 25 PHPの脆弱性を狙う攻撃、数百万件に急増 公表からわずか2時間で数 ... news.yahoo.co.jp
  26. 26 Cloudflare reported that the number of exploitation ... gigazine.net
  27. 27 PHP flaws trigger millions of hacking attempts, governments and companies shut down websites worldwide www.rnamedia.in
  28. 28 PHP2Shell: AI helped find a critical security flaw affecting ... www.cnn.com
  29. 29 More bugs out there: PHP2Shell is just the tip of the internet's old-code iceberg economictimes.com
  30. 30 PHP flaw takes websites offline worldwide as Japanese banks pause... pollar.news
  31. 31 Japan to Establish AI Team to Simulate Cyberattacks After PHP ... www.gate.com
  32. 32 PHP vulnerabilities trigger millions of exploit attempts, Cloudflare says www.tradingview.com
  33. 33 PHP Vulnerability Threatens Internet, Several Countries Disable ... www.kompas.id
  34. 34 Factbox-Governments, companies take websites offline ... www.internazionale.it
  35. 35 PHP2Shell: the worldwide precautionary blackout hard2bit.com
  36. 36 Is the Internet Safe Again After the PHP Nightmare? What You Need to Know cryptonews.net
  37. 37 Critical PHP flaws knock European government sites offline ... anewz.tv
  38. 38 CBC coverage of the PHP2Shell outages has stayed thin ... x.com
  39. 39 What is PHP2Shell, and why did it force websites around ... indianexpress.com