On-demand webinar
PHP2Shell: Technical Threat Briefing with Wiz Research
Watch Now
Key Takeaways
- Trace how AI-powered research surfaced both bugsWiz Research walks through the mechanics behind each unauthenticated RCE path. You'll also see how AI-powered security research helped surface them.
- Map affected PHP versions to your stackGet a clear view of which PHP releases are in scope. See how that translates to exposure across WordPress, Drupal, and MediaWiki.
- Protect PHP releases that can't be patchedxplore mitigation options for end-of-life PHP and systems you can't upgrade right away. Keep exposed workloads covered while upgrades wait.
About this webinar:
Watch a 20-minute technical briefing with the Wiz Research team that discovered and responsibly disclosed two critical PHP vulnerabilities enabling unauthenticated remote code execution (RCE).
These vulnerabilities affect widely used PHP versions, including older releases that will not receive security patches, and have potentially widespread impact across technologies such as WordPress, Drupal, and MediaWiki.
Our researchers will walk through what we've discovered, how we found these vulnerabilities, and what security teams need to know to assess their exposure and respond.
We'll cover:
The technical deep dive: How the vulnerabilities work and how Wiz Research uncovered the vulnerabilities using AI-powered security research.
Understanding the impact: Affected PHP versions, vulnerable systems, and the potential scope of exposure.
Detection and mitigation: How to identify affected resources, assess exploitation risk, and protect systems that cannot be patched immediately.
Whether you're a Wiz customer or not, we're happy to share our findings and help your team navigate these vulnerabilities.
