October 22, 2026
PHP2Shell and private equity: What Crosslake’s data reveals about portfolio risk
On October 21, PHP2Shell was announced publicly. Within two hours, Cloudflare recorded hundreds of thousands of exploitation attempts. The NSA urged organizations using PHP to prepare to update immediately or take systems offline.