PHP Vulnerability Responses by Company

サイバーリーズン合同会社

Japan-based services
Aliases / services
Cybereason / サイバーリーズン / Cybereason G.K. / Cybereason EDR / Cybereason Vulnerability Management / サイバーリーズン合同会社
Official website
https://www.cybereason.co.jp/
Sources identifying the operating company

Current Japanese entity name. The branding change planned for January 2027 is not treated as an already completed legal rename.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Cybereason EDR

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Official material lists Linux sensor support. The October28 PHP2Shell article gives investigation indicators and recommends PHP updates and restarts, but does not establish EDR-specific detection or prevention coverage.

Scope: An advisory does not establish product-specific remediation. Vulnerability Management is listed separately.

What users should do

Confirm OS and contracted detection coverage with support, and patch PHP separately. Indicators alone do not prove compromise or complete protection.

Official service URL

Source URLs

  1. Operating entity and Japanese service providerhttps://www.cybereason.co.jp/company/aboutus/Service and operation documentation
  2. Sensor specifications and supported OShttps://www.cybereason.co.jp/products/sensor/Service and operation documentation
  3. Vulnerability-management capabilitieshttps://www.cybereason.co.jp/products/vm/Service and operation documentation
  4. https://www.cybereason.co.jp/blog/spider-labs/levelblue-spiderlabs-blog/14588/https://www.cybereason.co.jp/blog/spider-labs/levelblue-spiderlabs-blog/14588/Service and operation documentation

Cybereason Vulnerability Management

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

Official material describes CVE identification, prioritization and patch guidance using the existing EDR sensor. Patch distribution is planned during FY2026; specific PHP2Shell CVE coverage is not stated.

Scope: General vulnerability-management features and guidance do not establish PHP2Shell coverage or completed automatic remediation.

What users should do

Ask support whether both CVEs are assessed, and arrange PHP remediation and restarts through your own operations process.

Source URLs

  1. Vulnerability-management capabilitieshttps://www.cybereason.co.jp/products/vm/Service and operation documentation
  2. https://www.cybereason.co.jp/blog/spider-labs/levelblue-spiderlabs-blog/14588/https://www.cybereason.co.jp/blog/spider-labs/levelblue-spiderlabs-blog/14588/Service and operation documentation
Related official sources
  1. Operating entity and Japanese service providerOfficial information directoryIdentifies the Japanese Cybereason provider.
  2. Sensor specifications and supported OSOfficial information directoryDocuments Linux support and monitoring/isolation capabilities, without incident-specific assurance.
  3. Vulnerability-management capabilitiesOfficial information directoryDocuments CVE assessment and recommended actions; patch distribution is marked as planned.

Comments