PHP2Shell: patch PHP now, then go hunting
Two critical PHP flaws allow unauthenticated RCE, and attackers were probing before the fix. Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, then hunt.
Threats & Vulnerabilities
Newly disclosed and actively exploited vulnerabilities: what’s affected, whether attackers are using it, and what to patch first, with a date on everything.
Start here: The Alert Tracker · Plex2Shell is being exploited: patch Plex, then assume compromise
