CISA confirms PHP2Shell vulnerabilities now exploited in attacks

CISA added the PHP2Shell vulnerabilities to its catalog of actively exploited flaws and ordered federal agencies to patch systems by Thursday. The agency confirmed these vulnerabilities are now being exploited in attacks, urging immediate action to mitigate risk. Federal agencies must comply with the directive to secure their networks.