Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Companies and hosting providers in the UAE are moving to close a newly disclosed set of PHP vulnerabilities known as PHP2Shell, deploying patched PHP packages, updating shared hosting environments and advising customers to check their runtime versions and restart web services, according to cybersecurity experts.
Summary
Pushkar Singh, regional head for Middle East and Africa at Protectt.ai, said the response showed the UAE was at the forefront of proactive threat response and digital resilience. Stay up to date with the latest news. Follow KT on WhatsApp Channels.
He said it also reinforced that cybersecurity is “not a one-time compliance exercise” but a continuous operational activity that must include timely vulnerability patching, runtime protection and threat intelligence backed by coordinated response. According to Censys, 4,691 internet-facing hosts in the UAE are potentially exposed to the flaws, representing 79.5 per cent of the country’s total versioned hosts. The UAE ranks 71st out of 233 countries and territories observed.
Singh said some estimates suggest three in four websites use PHP, so it is fair to infer that most UAE enterprise websites are affected.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
We've archived 343 other articles touching the same topic (technology) , see the full security news archive.
Related security advisories
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.