CISA confirms PHP2Shell under attack as researchers clock successful exploits

Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells

Preview courtesy of The Register. The full article opens on their site.