CISA confirms PHP2Shell under attack as researchers clock successful exploits
Both critical PHP flaws land on the agency’s exploited list as infosec pros confirm hackers are getting working shells
We haven't written up this one. The Register Science has the full story — the link below goes straight to it.
This story
This is one outlet's version. Read the fullest account.