PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The feed highlights multiple critical cybersecurity incidents, including actively exploited and unpatched remote-code-execution vulnerabilities, compromised certificate-authority keys, ransomware exploitation of a PAN-OS authentication bypass, supply-chain compromises, malware delivery campaigns, and major credential or cloud-service breaches. The most urgent items are the FortiSIEM flaw with public exploit code, Plex2Shell exploitation, compromised eMudhra CA keys, and unpatched PHP and Broadcom vulnerabilities.