Engineering
48 Hours of php2shell: How We Handled a Leaked PHP Zero-Day
Two critical remote code execution bugs in PHP itself leaked a day before the fix. Here is what we did between the first rumour and the last patched server — the interim measures, the attack-trace sweep, the patching around an overloaded package mirror, and the hardening that stays in place.
Oct 21, 2026 · 6 min read
