Security· ★★★· bearish·

South Korea raises cyber alert over PHP2Shell vulnerability

  • —The flaw was found using OpenAI's GPT-5.6 Sol and exploit code is already public
  • —KISA alerted 28,000 CISO-registered firms, 111 critical infrastructure sites and 1,068 ISMS-certified companies
  • —PHP 8.1 and older have no official patches and must be upgraded
  • —Servers should be checked for webshells and suspicious logins after patching
Why it matters: PHP underpins websites, online stores and crypto exchange infrastructure, so mass exploitation poses a direct security risk to the industry.
Source: Digital Today
More on this
Regulation · Sep 29
South Korea's debt relief fund skips crypto checks on borrowers, raising write-off concerns
 Regulation · Sep 16
South Korea Confirms Crypto Tax From January, but Preparations Raise Questions
 Security · Oct 19
South Korea's FSS chief vows to check Vitos ties to banks in KOK coin fraud case