DigiNews

Summary

Wiz Research reports ongoing PHP2Shell exploitation attempts with no confirmed end-to-end compromise in their telemetry. The post details two exploit chains (legacy and current) aiming to trigger memory exhaustion and memory-leak steps, notes that many attempts fail due to PHP settings and deployment differences, and lists IOCs observed in the wild. It concludes that PHP2Shell remains a risk in the short to mid term and emphasizes remediation through patching, exposure reduction, and careful monitoring.