I wouldn't skip updating, but is there anything else we can do, other than simply shutting down the web server until the fix is available?

lynndotpy 8 hours ago | parent | next [-]

I do not have details about any mitigation. There are rumors that people have independently come across php2shell exploits.

I shut down my servers five hours ago. This might have seemed premature at the time.

I think the best course of advice for most people is to shut down their servers as soon as they possibly can.

	▲	qingcharles 6 hours ago \| parent [-]
		I applied the mitigation to all my servers when it was released, but now I've stopped all the httpds. A few hours of overnight downtime, vs potentially trying to restore everything from backups tomorrow. Everyone should weigh it up.

xena 8 hours ago | parent | prev [-]

You could disconnect the web server from the internet!