PHP2Shell Is Now Exploited in the Wild: What to Do Today
No Comments on PHP2Shell Is Now Exploited in the Wild: What to Do Today
Two critical PHP RCE flaws, tracked as PHP2Shell, now have a confirmed successful exploit in the wild. Here is what the reports say, what they don't, and what I would do about it right now.
CVE-2026-21589: Atlassian Data Center Bug Was Under Attack Within Two Hours
A critical arbitrary file access flaw in Atlassian Data Center products saw exploitation attempts about two hours after technical details went public. Here is what was reported, what I think it means, and what to do today.