Koris365 is aware of the critical PHP vulnerabilities referred to as PHP2Shell and is monitoring for further guidance and updates.
The UK National Cyber Security Centre (NCSC) has published an advisory and is urging organisations to take immediate action.
Customer guidance
Please review the NCSC advisory for the full recommended actions and check it regularly for updates. Engage your internal IT team, application support provider or development partner to review and implement all applicable NCSC and vendor recommendations.
Koris365’s response and application responsibilities
Where vendors supporting the services we deliver are affected, we will work closely with them to understand the impact and coordinate any mitigations or updates they need to implement. We will also assess and action relevant recommendations within the scope of the services we manage.
Koris365 does not manage the application layer for customers. Responsibility for reviewing and implementing recommendations at the application layer therefore remains with customers and their appointed application providers. Infrastructure management alone should not be taken as confirmation that an application has been assessed or secured.