「PHP2Shell」のリスク低減に向けて直ちに実行すべき手順は - ZDNET Japan

「PHP2Shell」のリスク低減に向けて直ちに実行すべき手順は - ZDNET Japan

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page eg/news/japan-zdnet/article-35253966, snapshot 20261026T094033Z. Copied byte for byte; every file's sha256 is in captures/20261026T094033Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

ZDNET Japan (Japanese translation of Charlie Osborne's ZDNET piece), 26 October: steps to reduce the risk now. It says the PHP Project has published an extra measure against an 'unlikely' remote-code-execution path, registered as CVE-2026-115560, in an advisory dated 23 October (US time), which the 21 October release had already listed as a mitigation, and that this path needs unusual configuration and application code, so the project regards the mitigation as sufficient until its normal release cycle. It quotes Wiz that attackers could run code or read sensitive process memory, that the attack chain took an 'extremely complex series of steps' near what humans can realistically achieve, which frontier AI lowered. It says Amazon Threat Intelligence saw attempts four days before disclosure and, hours later, proof-of-concept code, that threat actors in the attack chain are trying to deploy Mirai-family botnets, and that Cloudflare's CEO Matthew Prince says millions of attempts have been logged. The translated text calls the flaw 'P2P2Shell' in two places, a typo in the capture.

> P2P2Shellの攻撃チェーンに関与する脅威アクターは、「Mirai」系のボットネットを展開しようとしている。

_Curator's translation:_ "Threat actors involved in the 'P2P2Shell' attack chain are trying to deploy 'Mirai'-family botnets."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "「PHP2Shell」のリスク低減に向けて直ちに実行すべき手順は - ZDNET Japan". Selected mechanically, not read by a person.

Capture notes

Language ja. Nothing in the page addresses an AI or hides text from a reader.