On October 21, the team that maintains PHP, the programming language behind roughly 70% of websites, released emergency fixes for two critical security vulnerabilities known as PHP2Shell. The response is a model of coordination, and it proved that organizations can move remarkably fast when a problem is treated as an emergency.
kAmv@G6C?>6?E 4J36CD64FC:EJ 286?4:6D :? E96 &]$][ &]z][ v6C>2?J[ y2A2?[ pFDEC2=:2[ 2?5 6=D6H96C6 :DDF65 FC86?E H2C?:?8D] r=@F5 AC@G:56CD =:<6 r=@F57=2C6[ p($[ 2?5 p<2>2: AFD965 @FE AC@E64E:@?D H:E9:? 9@FCD] w@DA:E2=D 2?5 6G6? 2 >2;@C tFC@A62? A@CE E@@< H63D:E6D @77=:?6 C2E96C E92? C:D< 6IA@DFC6]k^Am
kAm!2E49:?8 :ED6=7 H2D?’E :?DE2?E[ 3FE H:E9:? 9@FCD[ 6G6CJ@?6 <?6H 23@FE E96 AC@3=6>[ 28C665 :E >2EE6C65[ 2?5 3682? E@ 24E] p446DD:3:=:EJ :DDF6D 2=>@DE ?6G6C 86E E92E C6DA@?D6[ 6G6? E96 @?6D E92E DE@A A6@A=6 7C@> 4@>A=6E:?8 2 AFC492D6[ 3@@<:?8 2? 2AA@:?E>6?E[ @C 2AA=J:?8 7@C 36?67:ED] pD k2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>QmpF5:@tJ6k^2m 6IA=2:?D 96C6[ :E’D H@CE9 2D<:?8 H9J]k^Am
k9bm%96 7=2H H2D `c J62CD @=5] %96 FC86?4J H2D 3C2?5 ?6Hk^9bm
kAm%96 3F8D 369:?5 !w!a$96== 925 366? D:EE:?8 :? !w!’D 4@56 7@C 23@FE `c J62CD] ~A6?px AC6D:56?E 2?5 4@\7@F?56C vC68 qC@4<>2? k2 9C67lQ9EEADi^^I]4@>^853^DE2EFD^a``aha`dahed_eggb`anDla_Qm?@E65k^2m E92E 2 =:>:E65 G6CD:@? @7 E9:D 3F8 925 366? 5:D4@G6C65 :? a_ac[ 3FE H2D?’E 4@?D:56C65 D:8?:7:42?E] t?8:?66CD D2J E96J C6A@CE65 :E 2E E96 E:>6[ J6E k2 9C67lQ9EEADi^^HHH]4?34]4@>^a_ae^`_^aa^A9AaD96==\GF=?6C23:=:EJ\H92E\:D\:E\2?5\:D\J@FC\52E2\2E\C:D<]9E>=Qm2 7:I ?6G6C D9:AA65k^2m]k^Am
kAm(92E 492?865 E9:D ~4E@36C H2D?VE E96 GF=?6C23:=:EJ] xE H2D 9@H A6@A=6 2AAC@24965 :E] %96 D64FC:EJ DJDE6> 5:5?VE 24E @? E9:D 3F8 7@C `c J62CD] ~?46 !w!a$96== H2D 4@?7:C>65[ ?2>65[ 2?5 D4@C65[ E96 C6DA@?D6 DJDE6> E92E E96 D64FC:EJ :?5FDECJ 92D DA6?E 564256D 3F:=5:?8 E@@< @G6C]k^Am
kAmt249 7=2H 8@E 2? @77:4:2= xs[ D@ 6G6CJ@?6 H2D E2=<:?8 23@FE E96 D2>6 AC@3=6>] xE 8@E 2 D6G6C:EJ D4@C6 @7 h]a @FE @7 `_[ 2 4=62C D:8?2= E92E :E 4@F=5?’E H2:E] #6D62C496CD[ 6?8:?66CD[ 2?5 D64FC:EJ 7:C>D 4@@C5:?2E65 E96 7:I[ 2?5 8@G6C?>6?E 286?4:6D E@=5 @C82?:K2E:@?D E@ 24E :>>65:2E6=J]k^Am
kAm%92E DJDE6> :D H9J @C82?:K2E:@?D >@G65 D@ 72DE] }@E 3642FD6 D64FC:EJ E62>D 42C6 >@C6[ 3FE 3642FD6 :E >256 E96 FC86?4J :>A@DD:3=6 E@ >:DD 2?5 E96 ?6IE DE6A @3G:@FD] u@C A6@A=6 H:E9 5:D23:=:E:6D[ :DDF6D @?=:?6 2C6 2 52:=J C62=:EJ[ 3FE E96C6’D ?@ DJDE6> >2<:?8 DFC6 2?J@?6 ?@E:46D]k^Am
k9bmr2? H6 EC62E 2446DD:3:=:EJ :DDF6D D:>:=2C=Jnk^9bm
kAmx7 H6 =@@< 2E 9@H 2446DD:3:=:EJ :DDF6D 2C6 92?5=65[ >@DE @7 E92E EJA6 @7 DJDE6> :D >:DD:?8]k^Am
kAm!w!a$96== 8@E 2? @77:4:2= ?2>6] p446DD:3:=:EJ :DDF6D 86E 2 =:?6 :? 2 C6A@CE] |2?J E@@=D 2?5 6IA6CED C2E6 E9@D6 :DDF6D 3J D6G6C:EJ[ 3FE 6G6? 2 9:89\C:D< C2E:?8 C2C6=J EC:886CD 2 5625=:?6 @C 2?J @E96C 24E:@? E92E 7@C46D 2 7:I] x? pF5:@tJ6’D k2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>^5:8:E2=\2446DD:3:=:EJ\:?56I^a_ae^Qma_ae s:8:E2= p446DD:3:=:EJ x?56Ik^2m[ C@F89=J ` :? d :DDF6D H2D 9:89\C:D<[ >62?:?8 :E 42? DE@A D@>6@?6 7C@> 7:?:D9:?8 2 E2D<] %92E H@C<D @FE E@ 23@FE `b 9:89\C:D< :DDF6D @? E96 2G6C286 A286[ 2?5 >2?J @C82?:K2E:@?D 5@?’E EC62E 2?J @7 E96> 2D 2? 6>6C86?4J]k^Am
kAm}@?6 @7 E96D6 2C6 9:556? AC@3=6>D H2:E:?8 E@ 36 5:D4@G6C65] ~7 E96 `e_[___\A=FD A286D pF5:@tJ6 D42??65 7@C E96 x?56I[ E96 D2>6 7:G6 (63 r@?E6?E p446DD:3:=:EJ vF:56=:?6D W(rpvX 4C:E6C:2 72:= @? C@F89=J fdT @7 E96>[ C682C5=6DD @7 :?5FDECJ @C C68:@?] %62>D <?@H E96J’C6 E96C6] %96 :DDF6D ?6G6C 364@>6 FC86?E[ 2?5 “H6’== 86E E@ :E” BF:6E=J 364@>6D E96 >@DE 6IA6?D:G6 D6?E6?46 :? E96 C@25>2A] k^Am
kAm%96C6 :D >@>6?EF>] pE E96 7656C2= =6G6=[ E96 psp %:E=6 xx H63 2446DD:3:=:EJ CF=6 D6ED 2 4@>A=:2?46 5625=:?6 7@C DE2E6 2?5 =@42= 8@G6C?>6?E H63D:E6D 2?5 2AAD] x? pAC:=[ E9@F89[ E96 s6A2CE>6?E @7 yFDE:46 AFD965 E92E 5625=:?6 324< 2 J62C[ 4:E:?8 DE277:?8[ 3F586E[ 2?5 6IA6CE:D6i E96 D2>6 82AD E92E =62G6 2446DD:3:=:EJ :DDF6D H2:E:?8 6G6CJH96C6 6=D6] pE E96 DE2E6 =6G6=[ AC6DDFC6 :D 3F:=5:?8 72DE6C] pF5:@tJ6’D k2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>^8F:56D^a_ae\H63\2446DD:3:=:EJ\=:E:82E:@?\C6A@CE^Qma_ae (63 p446DD:3:=:EJ {:E:82E:@? #6A@CEk^2m 7@F?5 E92E ffT @7 2446DD:3:=:EJ =2HDF:ED 2C6 ?@H 7:=65 :? DE2E6 4@FCED[ 2D E@E2= 7:=:?8D 92G6 >@C6 E92? 5@F3=65 D:?46 a_a_]k^Am
kAmtFC@A6 92D 8@?6 7FCE96C] $:?46 yF?6 a_ad[ E96 tFC@A62? p446DD:3:=:EJ p4E 92D C6BF:C65 3FD:?6DD6D D6==:?8 <6J AC@5F4ED 2?5 D6CG:46D 24C@DD E96 t&[ 7C@> @?=:?6 D9@AD E@ 32?<:?8[ E@ >66E 4@>>@? 2446DD:3:=:EJ C6BF:C6>6?ED] #68F=2E@CD 2C6 24E:G6=J 4964<:?8] p44@C5:?8 E@ 2 k2 9C67lQ9EEADi^^2EJ2?E:<]4@>^3=@8^6FC@A62?\2446DD:3:=:EJ\24E\6?7@C46>6?E^QmC646?E C6A@CEk^2m 7C@> pEJ2?E:<[ $H656? 92D @A6?65 ag :?G6DE:82E:@?D :?E@ @?=:?6 D9@AD] x? yF?6[ 2 uC6?49 4@FCE 82G6 r2CC67@FC D:I >@?E9D E@ >2<6 :ED H63D:E6 2?5 2AA 2446DD:3=6[ H:E9 2 d__\6FC@\A6C\52J 7:?6 7@C >:DD:?8 E96 5625=:?6]k^Am
kAm$E:==[ 6?7@C46>6?E CF?D 4@F?ECJ 3J 4@F?ECJ 2?5[ >@C6 E92? 2 J62C :?[ k2 9C67lQ9EEADi^^HHH]4@>A=J=@7E]4@>^2446DD:3:=:EJ^622^6?7@C46>6?EQm?@ 7:?6D 92G6 366? AF3=:D965k^2m] k^Am
kAm}@E9:?8 E92E 2AA=:6D 24C@DD E96 3@2C5 E6==D @C82?:K2E:@?D E@ 24E E@52J] $@ E96 AC6DDFC6 DE:== 2CC:G6D @?6 42D6 2E 2 E:>6[ @7E6? 27E6C 2 9:89\:>A24E :DDF6 92D 2=C625J D9FE D@>6@?6 @FE]k^Am
k9bmqF:=E E@ DE@A 3C62<\:?D[ ?@E =@4<@FEDk^9bm
kAm%96C6’D 2 566A6C C62D@? 2446DD:3:=:EJ H2:EDi H9@ 766=D E96 :>A24E] $64FC:EJ E@@=D 2=6CE 2 4@>A2?J E96 >@>6?E D@>6@?6 EC:6D E@ 3C62< :?] }@E9:?8 2=6CED :E H96? 2 A6CD@? FD:?8 2DD:DE:G6 E649?@=@8J 42?’E 86E E9C@F89 4964<@FE]k^Am
kAm!w!a$96== E9C62E6?65 4@>A2?:6D 5:C64E=J] %96:C 52E2[ E96:C D6CG6CD[ E96:C C6AFE2E:@?] tG6CJ 6I64FE:G6 4@F=5 A:4EFC6 :E 92AA6?:?8 E@ E96> 2?5 4@F=5 :>>65:2E6=J BF2?E:7J E96 A@E6?E:2= 52>286] k^Am
kAmp D64FC:EJ 7=2H @?=J 9FCED @?46 D@>6@?6 7:?5D 2 H2J E@ 6IA=@:E :E] p446DD:3:=:EJ :DDF6D H@C< E96 @E96C H2J 2C@F?5] %96J D9FE A6@A=6 @FE 7C@> E96 >@>6?E E96J 8@ =:G6]k^Am
kAm(96? 2 D4C66? C6256C FD6C 42?’E 4@>A=6E6 4964<@FE 3642FD6 2 3FEE@? 92D ?@ =236=[ ?@E9:?8 @? E96 4@>A2?J’D D:56 3C62<D] }@ 2=6CE 7:C6D] }@ @?6 86ED A2865] %96 4FDE@>6C =62G6D] p44@C5:?8 E@ pF5:@tJ6 C6D62C49[ f`T @7 A6@A=6 H:E9 5:D23:=:E:6D =62G6 2 D:E6 H96? E96J CF? :?E@ 2446DD:3:=:EJ :DDF6D[ 2?5 >2J ?6G6C E6== E96 4@>A2?J H9J]k^Am
kAm“x CF? :?E@ AC@3=6>D 2== E96 E:>6 ECJ:?8 E@ EC2?D76C 7F?5D @C >2<6 A2J>6?ED[” D2JD s2G6 r2C=D@?[ 2 >6>36C @7 E96 pF5:@tJ6 p``:2?46[ 2? 2446DD:3:=:EJ E6DE:?8 8C@FA] “qFE x C2C6=J C6249 @FE E@ 4@>A2?:6D] x ;FDE 4C:?86 E9:?<:?8 23@FE 9@H x’> 8@:?8 E@ 6IA=2:? :E E@ A6@A=6] xE 766=D D@ 52F?E:?8]”k^Am
kAmu@C E96 4FDE@>6C[ E96 :DDF6 :D 4C:E:42=[ 3FE :E ?6G6C D9@HD FA 2?JH96C6 564:D:@?D 86E >256] %92E’D H9J E96 7:CDE E:>6 =6256CD9:A 962CD 23@FE :E :D D@ @7E6? :? 2 =2HDF:E]k^Am
kAmp?5 H96? E92E 2=2C> 5@6D D@F?5[ :E’D 6IA6?D:G6] p D:?8=6 4=2:> EJA:42==J D6EE=6D 7@C Sad[___ E@ Sfd[___[ 2?5 E96 D6EE=6>6?E :D C2C6=J E96 3:886DE 4@DE] {682= 766D[ 6I64FE:G6 E:>6[ 2?5 CFD965 7:I6D FDF2==J 255 >@C6 @? E@A]k^Am
kAmpE E96 9:89 6?5[ E96 ?F>36CD C6249 >:==:@?D] {2DE J62C[ u2D9:@? }@G2 k2 9C67lQ9EEADi^^HHH];FDE:46]8@G^4CE^>65:2^`caebae^5=Qm28C665 E@ A2J Sd]`d >:==:@?k^2m E@ D6EE=6 2 4=2DD 24E:@? 3C@F89E 3J 3=:?5 D9@AA6CD H9@ D2:5 E96J 4@F=5?’E FD6 :ED H63D:E6]k^Am
kAmx? E92E D6?D6[ 2? :?2446DD:3=6 H63D:E6 3692G6D 2 =@E =:<6 2? F?A2E4965 GF=?6C23:=:EJ] xE D:ED BF:6E=J[ 42FD:?8 ?@ :DDF6D 2?J@?6 42? D66[ F?E:= D@>6@?6 24ED @? :E] %96 5:776C6?46 :D E92E E96 A6@A=6 :E D9FED @FE H6C6 A2J:?8 E96 AC:46 E96 H9@=6 E:>6]k^Am
k9bmqF:=5 E96 C@FE:?6 367@C6 J@F ?665 E96 2=2C>k^9bm
kAm*@F 5@?’E 92G6 E@ H2:E 7@C E96 :?5FDECJ E@ 3F:=5 2? 6>6C86?4J DJDE6> 7@C 2446DD:3:=:EJ] $64FC:EJ’D DJDE6> 4@>6D 5@H? E@ 7@FC BF6DE:@?Dik^Am
k7:8FC6mk:>8 DC4lQ9EEADi^^:>286D]DE24<6C]4@>^H^`ag_^:>286D^DE@C:6D^a_ae^`_^ae^pF5:@tJ6\D64FC:EJ]A?8Q 2=ElQp E23=6 =:DE:?8 :>A@CE2?E BF6DE:@?D 7@C 2 D64FC:EJ DJDE6>UR_bhjD 2446DD:3:=:EJ 2?5 AC@E64E:@?]Q DEJ=6lQH:5E9i `__TQ ^mk7:842AE:@?mpF5:@tJ6k^7:842AE:@?mk^7:8FC6m
kAm}@E 6G6CJ 2446DD:3:=:EJ :DDF6 ?665D 2? 6>6C86?4J C6DA@?D6] |@DE @7 E96 E:>6[ D64FC:EJ’D DJDE6> CF?D BF:6E=J[ E9C@F89 C@FE:?6 D42?D[ C68F=2C A2E49 4J4=6D[ 2?5 EC:286 E92E 92AA6?D H66<=J] w@H6G6C[ E96 6>6C86?4J C6DA@?D6 H@C<D 3642FD6 E96 C@FE:?6 :D 2=C625J :? A=246] p446DD:3:=:EJ ?665D E96 D2>6 E9:?8i C68F=2C 4964<D 3F:=E :?E@ 9@H E62>D 2=C625J H@C<[ D@ :DDF6D 86E 7:I65 H6== 367@C6 2?J@?6 92D E@ D@F?5 2? 2=2C>]k^Am
kAmx>28:?6 2 4FDE@>6C H2=<D :?E@ 2 DE@C6[ A:4<D @FE H92E E96J H2?E[ 2?5 42?’E C6249 E96 C68:DE6C] }@ 3FD:?6DD H@F=5 D9CF8 2?5 =6E E96> H2=< @FE 6>AEJ\92?565] $@>6@?6 H@F=5 ?@E:46[ 2?5 :E H@F=5 36 7:I65 E92E 52J]k^Am
kAmp? :?2446DD:3=6 4964<@FE :D E96 D2>6 6IA6C:6?46[ 3FE @?=:?6] %96 5:776C6?46 :D E92E ?@3@5J D66D :E 92AA6?] !w!a$96== D9@H65 9@H 72DE @C82?:K2E:@?D 42? >@G6 H96? 2 AC@3=6> :D ?2>65[ D4@C65[ 2?5 @H?65] %96 4FDE@>6C 2E J@FC 5:8:E2= 4@F?E6C 56D6CG6D E92E D2>6 C6DA@?D6]k^Am
kAm*@F 42? DE2CE H96C6 E96 DE2<6D 2C6 9:896DEi 4964<@FE[ =@8:?[ 7@C>D[ 2?5 J@FC >@DE\G:D:E65 A286D] #F? @?6 @7 E96> E9C@F89 2 k2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>^D@=FE:@?^2446DD:3:=:EJ\D42??6C^Qm7C66 2446DD:3:=:EJ D42??6Ck^2m E@ D66 9@H >2?J 9:89\C:D< :DDF6D 2C6 H2:E:?8 E96C6]k^Am
kAmk2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>^A@DE^H92E\A9AaD96==\C6G62=D\23@FE\5:8:E2=\2446DD:3:=:EJ\D\FC86?4J\82A^Qmk6>m%9:D DE@CJk^6>mk^2mk6>m H2D AC@5F465 3Jk^6>m k2 9C67lQ9EEADi^^HHH]2F5:@6J6]4@>Qmk6>mpF5:@tJ6k^6>mk^2mk6>m 2?5 C6G:6H65 2?5 5:DEC:3FE65 3Jk^6>m k2 9C67lQ9EEADi^^9F3D]=2^"_b<=8$#_Q C6=lQ?@7@==@HQmk6>m$E24<6Ck^6>mk^2mk6>m]k^6>mk^Am
(0) comments
Welcome to the discussion.
Log In
Keep it Clean. Please avoid obscene, vulgar, lewd, racist or sexually-oriented language.
PLEASE TURN OFF YOUR CAPS LOCK.
Don't Threaten. Threats of harming another person will not be tolerated.
Be Truthful. Don't knowingly lie about anyone or anything.
Be Nice. No racism, sexism or any sort of -ism that is degrading to another person.
Be Proactive. Use the 'Report' link on each comment to let us know of abusive posts.
Share with Us. We'd love to hear eyewitness accounts, the history behind an article.