Watch Desk posted an update
A PHP vulnerability dubbed PHP2Shell is being exploited in the wild, according to Ivanti senior product manager Todd Schell. His practical warning: installing the fix may not be enough if the web server keeps running the old code.
Why it mattersSchell says to update the PHP runtime, stop the web server, then restart it. The exact steps vary by operating system, but without a restart, the old code stays in memory. He also says attackers could access what the PHP shell can see, and that exploitation is continuing to expand. The advice appeared in Help Net Security’s November Patch Tuesday forecast. If you run PHP services, check whether the affected versions apply to your systems and confirm the update has taken effect.
Discuss: When applying a security fix, should teams prioritise a fast patch or wait for a planned maintenance window?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.