OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery - Tech Startups
- OffSec launched a free, interactive PHP2Shell lab in Proving Grounds Play to help security professionals study and defend against two critical PHP vulnerabilities.
- Wiz researchers found that the flaws could allow attackers to take over Drupal and WordPress sites without passwords.
- The vulnerabilities were identified as CVE-2026-109618 and CVE-2026-109619, and CISA added both to its Known Exploited Vulnerabilities catalog on October 26.
- CISA recommends immediate patching, along with updating PHP, restarting affected processes, reviewing logs, and rotating potentially exposed credentials.
22 Articles
22 Articles
Two critical vulnerabilities in the PHP programming language have raised security alarms across Europe. We explain what they could allow attackers to do and why operators have temporarily shut down some web services.
The Manila Times
OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery
New hands-on lab lets security practitioners explore PHP2Shell exploitation firsthand as AI-assisted research reshapes vulnerability discovery.
Behind the scenes, IT experts and attackers compete for the critical gap in millions of servers. Private people should also check their home servers, routers and surveillance cameras.
What PHP2Shell Reveals About Web Security
In October 2026, critical vulnerabilities were disclosed in PHP, one of the most widely used server-side programming languages, raising security concerns for web services worldwide. Known as PHP2Shell, these vulnerabilities could allow unauthenticated attackers to execute remote code under certain conditions. More concerning, exploitation attempts were observed before their public disclosure, highlighting the importance of […] ] The post What PH…
Black October: why you can’t patch an exponential
Last Wednesday, I received an automated alert about two major vulnerabilities in the programming language behind roughly 70 per cent of websites, PHP. The issue was so serious that governments around the world began taking services offline. Our team was on it quickly, reviewing internal tools, hosting environments and client platforms. But PHP was only […]
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
