Photo of Benjamin Perry

Benjamin Perry

Co-lead of the firm’s Data Privacy & Cybersecurity practice, Ben helps companies navigate the evolving privacy, cybersecurity, and artificial intelligence (AI) landscape by translating complex legal requirements into practical strategies that reduce risk and support business objectives. Drawing on his litigation experience, Ben helps organizations identify potential vulnerabilities, mitigate exposure, and address challenges before they become costly problems.

Key point: The NSA and CISA have urged immediate patches for two critical PHP vulnerabilities. Here are six questions to guide your discussion with IT.

Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to as “PHP2Shell,” can permit unauthenticated remote code execution on affected systems. Exploitation attempts were reported even before the patch was…