Hunt says predicted PHP2Shell cybergeddon did not occur
Original title: Weekly Update 527: Cybergeddon News v. Reality
He says it took days to find one breach reliably tied to PHP2Shell, despite many unmaintained sites.
In Weekly Update 527, Troy Hunt writes that last week’s forecast of internet-destroying outages did not happen. He says PHP2Shell looked readily exploitable and many neglected sites remained exposed, yet he could not quickly find a breach reliably attributed to it. The post is commentary, not a new advisory.
Unconfirmed: Hunt’s account is one observer’s reading; he does not claim a complete survey of incidents.
- Hunt says there were no internet-destroying outages.
- He argues the quieter outcome was not only because defenders treated the bug seriously.
- No CVE identifier, affected versions or patch status appear in the post.
- Products
- PHP
From the original article
1 min read at troyhunt.com
As the news from last week has settled down, it would seem this headline was pretty spot on. The foretold apocalypse didn't eventuate, and there were no internet-destroying outages. In fact, it took days before I could find a single story of PHP2Shell being reliably attributed back
troyhunt.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.