GoKawiilPHP2Shell Patching Lags Far Behind Mass Exploitation, Researchers Find
Security researchers report that organizations are patching newly disclosed PHP vulnerabilities, dubbed PHP2Shell, much slower than attackers are exploiting them. Cloudflare's CEO said exploitation attempts rose from thousands to millions within hours of disclosure, while Check Point found 10% of organizations worldwide had already seen exploitation attempts. Ox Security and Flare separately found that over 97% of scanned instances had not advertised patched versions a day after fixes were released, and roughly half may never be patched, according to Cisco Talos.