PHP2Shell: the PHP flaw hitting the web, and what it teaches us about vulnerabilities
Most small businesses assume a website hack needs a clever attacker who has picked them out personally. This week showed how wrong that is. On 21 October 2026, the PHP project released emergency fixes for two critical flaws, nicknamed PHP2Shell, that can let a stranger run commands on a web…
SentrixaPHP2Shell: the PHP flaw hitting the web, and what it teaches us about vulnerabilitiesMost small businesses assume a website hack needs a clever attacker who has picked them out personally. This week showed how wrong that is.