Experts share advice on protecting against PHP2Shell flaws

Dark Reading gathered expert recommendations on defending against the critical PHP vulnerabilities known as PHP2Shell. Specialists note that simply updating is not enough and that organizations must assess their exposure and take extra precautions.

• Updating PHP alone does not eliminate the risk, infrastructure review is needed
• Experts advise checking whether PHP apps are exposed to the internet
• Additional protections beyond patching are recommended