Offline, or protected?
It did not have to be that way. A Web Application Firewall can step in exactly where PHP2Shell strikes. But having a WAF is not the same as being protected: the difference lies in how it is tuned.
What you will find in the advisory
- How the attack works, and why updating your application or plugins is not enough
- How a well-tuned WAF stops PHP2Shell, even before a signature exists
- Four ways a WAF can still let the attack through
- A practical action plan for this week
Download the pdf-advisory
Want to know more about AXS Guard WAF and our managed WAF service? Contact us at sales@approach-cyber.com.