CYFIRMA
- Aliases / services
- CYFIRMA / サイファーマ / DeCYFIR / DeTCT
- Official website
- https://www.cyfirma.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
PHP2Shell threat research and guidance
- Response status
- Version3 research published
- Response information checked
- 2026-10-27
Current re-audit: Official response verified · Research date: 2026-10-27
Threat intelligence and external attack surface management.
October24 Version3 adds detection intelligence and advises patching, restarting all workers and reviewing historical logs.
Scope: Threat intelligence, not a blanket patch-completion claim for products or customers.
What users should do
Compare current official indicators with monitoring and install fixes or verified backports.
Official service URL
Source URLs
- PHP2Shell threat research and defensive guidancehttps://www.cyfirma.com/research/cyfirma-threat-advisory-suspected-dprk-campaign-staging-php2shell-targeting-against-global-php-infrastructure/Response evidence
Related official sources
- PHP2Shell threat research and defensive guidanceOfficial notice
Comments