Skip to content
theregister·

🚨PHP2Shell Bug: Third Incident, No Emergency Fix

Another PHP2Shell bug, but no rush to fix

TL;DR

A third PHP2Shell bug has emerged, but it won't get an emergency fix. The exploit bypasses protections and affected UK government services. Hackers attacked before disclosure, and PHP blames Chainguard for putting the web at risk.

A third PHP2Shell bug has emerged, but it won't receive an emergency fix. This exploit bypasses protections designed to stop remote code execution, putting dozens of UK government services out of service. Hackers began attacking before the bug's disclosure, highlighting the importance of proper disclosure protocols. PHP, an old language dating back to the mid-1990s, has seen modernization but retains outdated design elements. The incident underscores the need for better supply chain security and patch liaison roles to manage the deployment of critical fixes without causing widespread disruption.

PHP2Shell Bug: Third Incident, No Emergency Fix — theregister

Key Points

1

Third PHP2Shell bug bypasses protections designed to stop remote code execution.

Keep reading — it's free

Enter your email to keep reading — plus the best of AI & tech, daily. Free, forever.

Also get
or

Already a member? Sign in

php2shellsupply-chain-securitypatch-liaisonweb-serverssecurity-protocols

Comments

Subscribe to join the conversation...

Be the first to comment