PHP2Shell UPDATE: Hackers Are Already Targeting Servers 🚨

The PHP security emergency has just escalated, and the story behind it is getting worse. Remember those two critical PHP vulnerabilities I reported? Well, details leaked before the planned public release, including a video demonstrating a working attack.

Security companies are now detecting real attempts to exploit the flaws. One company reports attacks at scale, and Cloudflare says attackers have been changing their methods to get past firewall protections.

Emergency patches were released early. But here’s the important distinction: older PHP installations may not receive normal security updates.

So, if your hosting provider hasn’t confirmed the patch, chase them today and ask whether they’ve checked for suspicious activity before the update. Because patching closes a vulnerability, it doesn’t undo a breach that may already have happened.

Hi, I’m Dustin Gray, and this is The Action Report.