php2shell and eMudhra: Would Your Network Have Been Compromised?

In October 2026, two back-to-back incidents hit global infrastructure and demanded immediate action from security teams worldwide. CISA issued emergency guidance, browser vendors pushed emergency trust store updates, and PHP-dependent systems across every industry were exposed.

Both incidents moved faster than most teams could respond, and both left gaps open that are still unaddressed in environments that didn't act deliberately.

This threat brief gives you an overview of the incidents and a practitioner's checklist for securing your environment.