PHP2Shell: two critical PHP flaws allow unauthenticated remote code execution.
Author
A back-to-basics walk through what blue teams actually defend at each layer, and why the unglamorous stuff (Layer 2, BGP) keeps deciding the scoreboard.