CISA Orders Federal Agencies to Patch PHP2Shell Exploit After Real-World RCEs
CISA confirms PHP2Shell exploitation, orders federal agencies to update PHP before Oct. 29, after attackers hit Apache mod_php servers.
Cisa
1 documented investigation and news reports published under this subject.