Oct 27: CISA confirms PHP2Shell flaws are now exploited in attacks
Exploitation windows keep shrinking (PHP2Shell is already under attack, and exploitation averages three days after disclosure), so patch internet-facing PHP, edge and identity components first, and treat AI sandbox and reasoning-boundary failures as live risks.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.