Cyber Brief

Short, dated briefings on cyber security events that affect Australian organisations: what happened, whether it affects you, and what to do. Written by efex's security team and updated as the facts change.

Cyber Brief · Advisory

22 October 2026

PHP2Shell: what Australian organisations need to do now

Two critical flaws in PHP can let an attacker take control of a web server without a password. Which versions are fixed, how to check your sites, and what to do in what order.

Updated 12:15pm AEDT, 22 October 2026

Read the brief