Two critical flaws, one name: PHP2Shell

Two critical vulnerabilities have been found in PHP, the infrastructure that powers a large part of the internet. The security community refers to them as PHP2Shell. Their severity has mobilized not only technical teams but also public authorities.

Who issued warnings?

Alongside Turkey's Cybersecurity Presidency, public agencies and security authorities in countries such as Germany, France and the Netherlands issued successive warnings. Some countries took additional measures until systems are updated.

What to do

  • Upgrade PHP installations to the latest version as soon as possible.
  • Closely monitor server and application logs.
  • Deploy protection layers that filter suspicious requests.
  • Follow warnings published by public authorities.

The technical details and protection steps are covered in the accompanying video.