Breaches and incidents
Czech Technical University in Prague (CVUT): attack stopped, some systems taken offline amid PHP2Shell exploitation wave
CVUT said on Facebook it “v soucasnosti resi kyberneticky utok na svou IT infrastrukturu” (is dealing with a cyberattack on its IT infrastructure), that...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- CVUT said on Facebook it “v soucasnosti resi kyberneticky utok na svou IT infrastrukturu” (is dealing with a cyberattack on its IT infrastructure), that the active attack was stopped and some systems were preventively shut down; it described it as part of worldwide attempts to hit PHP websites (Lupa.cz, Novinky).
- Root cause: per CVUT, linked to the worldwide campaign against PHP sites; Lupa.cz says the university reportedly fell victim to the critical “PHP2Shell” PHP flaws allowing unauthenticated remote code execution, but CVUT did not state the exact flaw or technique (Novinky).
- No attacker named.
- Recovery ongoing; CVUT did not say which services were down or whether student or staff data was accessed. NUKIB urged updating PHP to fixed versions and warned exploitation details were already public.