The PHP2Shell incident highlights how quickly a critical software vulnerability can turn into an active security threat. With exploitation attempts reported before public disclosure, founders and engineering teams need to know which PHP versions their systems run, recognise signs of compromise, and have a clear plan for patching,