{"id":14225,"date":"2026-10-27T13:38:48","date_gmt":"2026-10-27T11:38:48","guid":{"rendered":"https:\/\/www.withsecure.com\/?p=14225"},"modified":"2026-10-27T13:38:50","modified_gmt":"2026-10-27T11:38:50","slug":"the-smb-nightmare-that-ran-on-php","status":"publish","type":"post","link":"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/","title":{"rendered":"The SMB nightmare that ran on PHP"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 wp-block-one-column-block--meta-sharing layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <div class='wp-block-one-column-block__meta-sharing-grid'><div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    The SMB nightmare that <span class=\"blue-text\">ran on PHP<\/span><\/h1>                    <div class=\"wp-component-content__inner\">\n                                                    <div class=\"wp-component-content__meta\">\n                                                    <span class=\"wp-component-content__content-type\">\n                                Blog                            <\/span>\n                                                                            <span class=\"wp-component-content__meta-categories\">\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        Products                                    <\/span>\n                                                            <\/span>\n                                                                                                    <span class=\"wp-component-content__meta-date\">\n                                Oct 27, 2026                            <\/span>\n                                                                    <\/div>\n                                            <\/div>\n                <\/div><section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--content-1 wp-block-sharing-icons--disable-container wp-block-one-column-block__sharing fade-in wp-block-one-column-block__sharing fade-in\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/&#038;title=The%20SMB%20nightmare%20that%20ran%20on%20PHP\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The SMB nightmare that ran on PHP&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n<\/div>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements.jpg.webp\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-content-25-1 wp-component-image--fit-cover\" alt=\"A person in green types on a laptop showing the WithSecure Elements dashboard with colored ring status indicators, a colleague seated across the table.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-2223-Elements-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                                                    <\/figure>\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-sidebar layout--none-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_b5c1dc251dde5e87bdf112fe1025c645\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <nav\n    class=\"wp-component-content-navigation wp-block-two-column-block__content-nav js-content-navigation\"\n    data-bem-base=\"wp-component-content-navigation\"\n    data-nav-column=\"left\"\n    data-nav-type=\"auto\"\n>\n            <p class=\"wp-component-content-navigation__title\">\n            Content        <\/p>\n    \n    <div class=\"wp-component-content-navigation__mobile\">\n        <label class=\"wp-component-content-navigation__mobile-label\">\n            <span class=\"wp-component-content-navigation__mobile-label-text\">\n                Content navigation            <\/span>\n            <select class=\"wp-component-content-navigation__select js-content-navigation-select\">\n                <option value=\"\">\n                    Select a section                <\/option>\n                            <\/select>\n        <\/label>\n    <\/div>\n\n    <div class=\"wp-component-content-navigation__desktop\">\n        <div class=\"wp-component-content-navigation__list-wrapper\">\n            <span\n                class=\"wp-component-content-navigation__indicator js-content-navigation-indicator\"\n                aria-hidden=\"true\"\n            ><\/span>\n            <ul class=\"wp-component-content-navigation__list js-content-navigation-list\">\n                            <\/ul>\n        <\/div>\n    <\/div>\n<\/nav>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__hide-mobile wp-block-two-column-block__share wp-block-two-column-block__hide-mobile\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/&#038;title=The%20SMB%20nightmare%20that%20ran%20on%20PHP\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The SMB nightmare that ran on PHP&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <p data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">On October 21, 2026, a patch landed for PHP2Shell (CVE-2026-109618 and CVE-2026-109619), a critical flaw that lets an unauthenticated attacker run code remotely on PHP installations that serve web requests. Both carry an official CVSS v4.0 score of 9.2. Because the flaws are in PHP itself, a site can be exposed even when its own code is secure. National cyber authorities, including CISA, the Canadian Centre for Cyber Security and the UK NCSC, have issued alerts, and security vendors have reported exploitation attempts.<\/p>\n<p>For most small and mid-sized businesses, the interesting question is not the score. It is this: do we even run PHP?<\/p>\n<p>Probably, yes. You just would not call it that.<\/p>\n<h2 id=\"php-hides-in-everyday-tools\" data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">PHP hides in everyday tools<\/h2>\n<p data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">Nobody writes &#8220;PHP&#8221; on the org chart. But it powers a lot of what a small business relies on:<\/p>\n<ul>\n<li>The company website, especially WordPress and WooCommerce<\/li>\n<li>Web shops and the admin panels behind point-of-sale systems<\/li>\n<li>Appointment booking and event registration<\/li>\n<li>Time tracking and lightweight CRM<\/li>\n<li>Customer portals and custom SaaS built by a local software house<\/li>\n<\/ul>\n<p>Your team knows &#8220;we have a website and online booking.&#8221; The PHP underneath is invisible, until it is the thing everyone is asking about.<\/p>\n<h2 id=\"three-owners-three-timelines\" data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">Three owners, three timelines<\/h2>\n<p data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">Who fixes it depends on who runs it:<\/p>\n<ol>\n<li><strong>You run the server.<\/strong> The patch is yours to apply.<\/li>\n<li><strong>Your MSP manages it.<\/strong> They patch, once they know it is there.<\/li>\n<li><strong>A third party hosts it as SaaS.<\/strong> You wait for the vendor, and ask for a date.<\/li>\n<\/ol>\n<p>Each path has a different owner and a different update rhythm. That is normal. It just needs to be known.<\/p>\n<h2 id=\"the-older-version-trap\" data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">The older-version trap<\/h2>\n<p data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">Official fixes shipped only for PHP 8.2 and later. PHP 8.1 and earlier are no longer supported; the PHP security team released minimal source backports for 7.4, 8.0 and 8.1, aimed at teams that build from source, and some distributions and LTS vendors offer fixes. So a custom application on an old version is rarely a quick fix. Appliances are a related worry: many embed PHP, and the vendor update may arrive later, or sit waiting to be installed. As of October 22, one major network-security vendor had confirmed all versions of its firewall OS affected, with fixed releases still pending.<\/p>\n<h2 id=\"what-to-do-next\" data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">What to do next<\/h2>\n<p data-lfile-container=\"2c0eeda6-d303-4dd8-a560-f1778bcbb2dd\" data-pm-slice=\"1 1 []\">Ask your service provider one question: <strong>&#8220;Do you know what is running for us?&#8221;<\/strong><\/p>\n<p>A good partner answers with a list, not a promise. If yours cannot, that is useful to learn before the next incident, not during it.<\/p>\n<p>We work with MSPs every day to make that list fast and complete.<\/p>\n<\/div>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/&#038;title=The%20SMB%20nightmare%20that%20ran%20on%20PHP\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=The SMB nightmare that ran on PHP&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n        <div class=\"wp-component-content wp-component-content--default wp-block-cards__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Blog <span class=\"blue-text\">post<\/span><\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Read our latest blogs<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                            <div class=\"wp-block-cards__cards row-load\">\n                    <div class=\"wp-component-card-insight wp-block-cards__card wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"Two colleagues in a wood-panelled meeting room look at a wall screen displaying the WithSecure Elements security dashboard with trend charts for findings and scanned resources.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-0065-Elements-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">A critical PHP flaw is in the news. Here is what it means for your business.<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/a-critical-php-flaw-is-in-the-news-here-is-what-it-means-for-your-business\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"A woman with long red hair gestures while presenting beside a seated colleague, in front of a wall screen showing the WithSecure Elements Cloud architecture diagram.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-3039-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">From panic to plan: exposure management for the next PHP<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/from-panic-to-plan-exposure-management-for-the-next-php\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"A woman in a green cardigan gestures while talking with a colleague in an open-plan office, a coworker working at dual monitors in the background.\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-1536x1025.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/06\/2026-05-21-WithSecure-1148-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">72 hours of PHP2Shell: what MSPs learned<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/72-hours-of-php2shell-what-msps-learned\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>                <\/div>\n                                                <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":15,"featured_media":13036,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[126],"tags":[],"content_type":[],"class_list":["post-14225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-products"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"2048\" height=\"1366\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements.jpg\" class=\"wp-component-card-insight__image\" alt=\"A person in green types on a laptop showing the WithSecure Elements dashboard with colored ring status indicators, a colleague seated across the table.\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements.jpg 2048w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-300x200.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-1024x683.jpg 1024w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-768x512.jpg 768w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-1536x1025.jpg 1536w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-447x298.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/06\/2026-05-21-WithSecure-2223-Elements-219x146.jpg 219w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Products<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">The SMB nightmare that ran on PHP<\/h3>\n                                                    <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/the-smb-nightmare-that-ran-on-php\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=14225"}],"version-history":[{"count":5,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14225\/revisions"}],"predecessor-version":[{"id":14285,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14225\/revisions\/14285"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media\/13036"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=14225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/categories?post=14225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/tags?post=14225"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/content_type?post=14225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}