CISA confirms PHP2Shell under attack as researchers clock successful exploits

Researchers got working shells. The patch is the only thing slower than the attackers.

Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells