Browsing Tag

PHP2Shell

3 posts

Two Days From Patch to Root: How a PHP2Shell Chain Took Over 25 Palo Alto Servers, and What “AI-Assisted” Really Means

A white network security appliance in an open white server rack with a small front hatch standing open and one amber status light among blue ones
Attackers chained PHP2Shell with the Linux kernel bug Fragnesia to root 24 Palo Alto firewalls and a management server, two days after PHP’s fix and before the firewall fix existed. What Dream and Palo Alto confirm, what “AI-assisted” means here and what it doesn’t, and what companies and site owners should do now.
View Post

The 22-Year Road to PHP2Shell: How AI-Assisted Review Finished an Old Story

Comic illustration: a researcher in a white hoodie stands beside a server rack and a faceted geometric blue elephant, while a glowing turquoise thread runs from an old archive box to a small turquoise shield
PHP2Shell was fixed on October 21, 2026, but the story starts with a 2004 advisory about unsafe interruptions. An illustrated retelling, inspired by Calif’s php2shell comic: how Calif, OpenAI and Wiz used frontier AI models to finish a 22-year-old line of research, what half-built data and stale state mean, who contributed what, and what AI changed and did not change.
View Post

PHP2Shell and a Node.js Security Release on the Same Day: What to Patch, Restart and Check Now

A technician in a light grey shirt slides glowing turquoise server modules into an open white rack in a bright data hall with tall windows and blue sky
PHP fixed two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619 (PHP2Shell), in 8.5.12, 8.4.27, 8.3.36 and 8.2.35. On the same day, Node.js shipped fixes for ten vulnerabilities in 22.23.4, 24.22.1 and 26.12.1. What changed, who is exposed, which cloud platforms patch for you, how to check your version, and a patch-and-restart checklist for website owners, small businesses and admins.
View Post