{"type":"post","id":"bitsight-a-third-of-vulnerable-php-hosts-patched-377e84","slug":"bitsight-a-third-of-vulnerable-php-hosts-patched-377e84","title":"Bitsight: a third of vulnerable PHP hosts patched PHP2Shell in a week, but EOL branches barely moved","description":"Bitsight’s internet scan data suggests that PHP2Shell remediation is split in two: supported PHP branches moved quickly, while end-of-life deployments mostly did not.","retrieval_nugget":"Bitsight’s internet scan data suggests that PHP2Shell remediation is split in two: supported PHP branches moved quickly, while end-of-life deployments mostly did not. For teams building with AI, the lesson is operational rather than model-specific: agent-facing services still depend on a patchable runtime estate, and unsupported infrastructure turns an emergency fix into a long-lived exposure.","published_at":"2026-10-30","updated_at":"2026-10-30","record_date":"2026-10-30","date_kind":"published_at","topics":[],"entities":["Bitsight","PHP","PHP2Shell","CVE-2026-109618","CVE-2026-109619","Amazon"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"Bitsight adds a separate patching snapshot: roughly one-third of vulnerable PHP hosts patched within a week, while end-of-life branches saw little movement.","prior_refs":["memory:7aaa5407-567d-8874-af2e-8f43cbc7dcc4","memory:8b50bea4-37d4-8fec-a248-73923eefa35a"],"source_url":"https://www.bitsight.com/blog/php2shell-scanning-exploitation-patching","source_urls":["https://www.bitsight.com/blog/php2shell-scanning-exploitation-patching"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:bitsight-a-third-of-vulnerable-php-hosts-patched-377e84","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/bitsight-a-third-of-vulnerable-php-hosts-patched-377e84/","markdown":"https://newruntime.com/posts/bitsight-a-third-of-vulnerable-php-hosts-patched-377e84.md","json":"https://newruntime.com/posts/bitsight-a-third-of-vulnerable-php-hosts-patched-377e84.json"},"next_reads":[{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}