Beyond the Hotfix: What PHP2Shell Teaches Us About Runtime Governance
Two critical flaws in the core PHP runtime (CVSS 9.2) allow unauthenticated remote code execution, and exploitation is reportedly already happening. Here's what's affected, a six-step checklist for auditing your PHP projects across Docker, Elastic Beanstalk, Azure App Service and buildpacks, and four practices that turn the next critical PHP fix into a one-line change.
