PHP2Shell disclosure sparks urgent mitigation and disclosure-timing questions

PHP2Shell reportedly enables remote code execution and memory disclosure; the PHP Foundation says it has patched the flaws, and NSA urges updates or taking affected systems offline. Coverage emphasizes reportedly premature disclosure of AI-assisted discovery but supplies little technical detail; exploitation surges and government takedowns remain difficult to verify, and earlier exploitation claims are contested. A Qualys webinar offers exposure-validation guidance, but its listing provides no technical details or independent evidence; operators should verify exposure, especially on legacy or unsupported PHP systems, and prioritize mitigation.