CISA adds PHP2Shell flaws to exploited list, orders federal patch by Thursday

CISA has confirmed active exploitation of PHP2Shell vulnerabilities and mandated federal agencies patch by Thursday. The move signals a concrete threat to government systems, though the specific attack scope and actors remain undisclosed. This elevates the vulnerabilities to a priority for defenders across sectors.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works