PHP2Shell vulnerabilities expose global websites to severe cybersecurity risks

Two critical vulnerabilities in PHP are testing organizations' ability to identify exposed web infrastructure and deploy security updates, while prompting cloud, network, and endpoint security suppliers to introduce interim protections. The flaws can allow unauthenticated remote code execution, but researchers' observations of attack attempts do not establish widespread successful compromise or an imminent internet-wide outage.