# CISA adds PHP2Shell detection rule and urges unpatched systems offline

_Published Sunday, October 25, 2026 at 12:05 AM EDT · Security · Latest · Tier 2 — Notable_

![CISA adds PHP2Shell detection rule and urges unpatched systems offline — Primary](https://jf.x.com/images/post/2113984287481716741.png)

CISA updated its PHP2Shell alert with a SIGMA detection rule to help identify potentially suspicious activity and added partner resources.

The agency urged organizations unable to update immediately, or using unsupported PHP 8.1 or earlier versions, to take affected PHP-based systems offline until patched or updated.

## Sources

- [Cybersecurity and Infrastructure Security Agency (@CISAgov)](https://x.com/CISAgov/status/2113984287481716741)

---
Canonical: https://techandbusiness.org/newswire/r2chgRaJV_ApJjjKboYaUr
Published: 2026-10-25T04:05:49.311Z
Story chronology: 2026-10-24T13:21:44.000Z
Retrieved: 2026-10-26T09:06:43.159Z
Publisher: Tech & Business (techandbusiness.org)