The PHP2Shell vulnerabilities went unnoticed for more than ten years until artificial intelligence helped identify the critical code flaws affecting all versions of PHP. If successfully breached, vulnerable systems could allow threat actors to remotely execute unauthorized commands and seize control of targeted web servers. While core state infrastructure avoided disruption, widespread exploitation attempts prompted the Cyber Security Agency of Singapore to advise ongoing network monitoring. The government is also establishing an emergency helpline and providing testing co-funding to protect small and medium enterprises.
Key points
Government technology agencies successfully protected vital infrastructure through immedi…: Government technology agencies successfully protected vital infrastructure through immediate patching and alternative safeguards.
Organizations must maintain active network monitoring due to widespread proof-of-concept…: Organizations must maintain active network monitoring due to widespread proof-of-concept exploitation attempts emerging globally.
Small and medium enterprises can access financial support and an upcoming cyber incident…: Small and medium enterprises can access financial support and an upcoming cyber incident helpline to improve their resilience.
Sources checked by our analysis pipeline: 1
Organisations should continue to monitor their systems for signs of compromise, says the Senior Minister of State for Health.
SINGAPORE: There is no evidence that PHP vulnerabilities were exploited in government systems or Singapore's critical information infrastructure (CII), said Senior Minister of State for Health Tan Kiat How in parliament on Wednesday (Nov 4).
This follows the Oct 21 disclosure of critical flaws in PHP, a programming language that runs about 70 per cent of the world's websites, leading Singapore authorities to urge organisations to patch gaps immediately amid cyberattack threat.
Following the disclosure, the Government Technology Agency (GovTech) and Cyber Security Agency of Singapore (CSA) worked with government agencies and CII owners to identify and secure affected systems, said Mr Tan in response to parliamentary questions.
"Where immediate patching was not possible, alternative measures were put in place," he said.
Asked if any compromises or service disruptions had been detected, Mr Tan said there has been no evidence of the two flaws, collectively known as PHP2Shell, being exploited in government or CII systems.
Created as part of the creative coding challenge Codevember 2026, the interactive simulation designated "01 / FOLD" introduces digital material physics. Users can directly manipulate the virtual cloth and temporarily halt the application using designated keyboard controls. This experimental piece explores real-time rendering and interactive manipulation for digital textures.
Unidentified hackers manipulated cooling temperatures across at least 11 European nations, ruining tonnes of food by exploiting internet-connected refrigeration hardware. The coordinated disruption targeted retailers and food processors in multiple countries, prompting European Union officials to prepare a collective defense against escalating supply chain threats. Investigators suspect non-state actors carried out the campaign using relatively unsophisticated methods against vulnerable network setups.
A new project called catlang demonstrates how mathematical category theory can serve as an effective intermediate representation for programming languages. The system parses custom arrow notation and compiles entire programs into single, monolithic queries executed within a relational database. This novel approach validates whether abstract algebraic structures can successfully orchestrate general computational logic inside existing database engines.