CrowdStrike Protects Customers from Threats Delivered via PHP2Shell Read blog
CrowdCast

PHP2Shell: What You Need to Know Now and How to Prepare for What's Next

Securing the agentic enterprise thumbnail
By clicking submit, I consent to the processing of my contact information by CrowdStrike and its partners, including to CrowdStrike contacting me and sharing my contact information with its partners. I acknowledge that CrowdStrike will use and keep my contact information for as long as necessary for these purposes in accordance with its Privacy Notice.
CrowdStrike logo

You registration has been received!

Please check your inbox for more information.

Know what's at risk. Act on what matters. Be ready for what's next.

Americas: October 28 @ 10 a.m. PT | 1 p.m. ET
Europe: 28 October @ 3 p.m. GMT
JAPAC: 29 October @ 3 p.m. AEDT | 12 p.m. SGT | 9:30 a.m. IST

Two critical vulnerabilities in the widely used PHP engine could let attackers execute commands without authentication, potentially leaving no obvious signs in application logs. With about 275,000 IP addresses running vulnerable PHP services1 and exploit attempts in the millions, security teams need answers to three questions: Are we affected? What should we do? How do we detect and stop an attack?

Join CrowdStrike research and product experts for a practical look at PHP2Shell. They’ll share findings from CrowdStrike’s research and clear steps to find affected systems, apply fixes, and detect suspicious activity.

Frontier AI-assisted research uncovered PHP2Shell in code that had been in every PHP release for a decade. With the time from vulnerability discovery to exploitation getting shorter, we’ll also discuss why traditional vulnerability management is under pressure and what teams can do now to prepare.

1 Based on CrowdStrike Falcon® Exposure Management external attack surface management (EASM) data

Featured Speakers
Noam Dahan
Noam Dahan

Senior Manager, Engineering

CrowdStrike

Read bio
Anthony Roman
Anthony Roman

Director, Product Management

CrowdStrike

Read bio
Oliver Friedrichs

Noam Dahan,


Senior Manager, Engineering, CrowdStrike

 

Noam Dahan leads the Cloud Security Detection Research team at CrowdStrike, where his team researches emerging threats to cloud environments and workloads and turns that research into the detections that protect customers.
Rob Truesdell

Anthony Roman


Director, Product Management, CrowdStrike

 

Anthony Roman is a Product leader responsible for threat detection for cloud and endpoint security. His team works with teams across the company to establish the detection and research roadmap based on CrowdStrike's unique understanding of the evolving threat landscape.
Additional Resources