PHP2Shell: why your system needs a developer even when everything works
On 21 October an emergency release fixed two critical PHP vulnerabilities, and five days later the US cybersecurity agency listed them as actively exploited. What happened, who is affected, and why updating is not a one-off job.
By Janes Zsolt | 2026-11-03