CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by Thursday. [...]

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.