SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire

I wrote about Log4Shell when it broke in December 2021. The lesson then was how much of the modern web rests on open-source code that nobody fully sees. Related: Log4j’s big lesson  PHP2Shell teaches that lesson again, with a twist. Log4Shell was found the old-fashioned way, by a human researcher at Alibaba’s cloud security team. This time, the... Weiterlesen: SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is mor…