OT - PHP2shell - how did we do five years after Log2j?

["Olle E. Johansson" <oej () edvina net>]

The GVIP project just published a blog post about the PHP2shell incident.

https://www.gvip-project.org/blog/2026/php2shell/

In short:
a vulnerability record is only as useful as its ability to match the software you run, and today our databases cannot 
match runtimes.

On Friday the 13th at 16:00 CET we’re hosting a webinar to discuss how the vulnerability systems handled this issue.
Registration is free at https://gvip-project.org/community/

Looking forward to seeing you then!

/Olle