PHP2Shell on AWS: simulate, detect, and fix with AWS services
How to operationalize PHP2Shell (CVE-2026-109618/109619) defense on AWS: discover exposure with Inspector, contain at the edge with WAF, fix per compute type, and detect with GuardDuty.
Recent posts
PHP2Shell: critical RCE in the PHP interpreter (CVE-2026-109618 and CVE-2026-109619)
Understand PHP2Shell, the pair of critical RCE flaws in the PHP engine, and how to defend: an isolated detection lab, interim mitigations, proxy/WAF limits, and host-level detection.
Session 052 — Aurora: Serverless, Global Database and Differences vs Standard RDS
Aurora architecture with shared cluster volume, Aurora Serverless with ACU scaling, Global Database for cross-region DR, and fundamental differences vs standard RDS.
Session 051 — RDS: Multi-AZ, Read Replicas, RDS Proxy and Performance Insights
Multi-AZ DB Instance vs DB Cluster vs Read Replicas, RDS Proxy for connection pooling, Performance Insights and transition to CloudWatch Database Insights.
Session 050 — EKS: Karpenter — Dynamic Node Provisioning and NodePools
Karpenter architecture vs Cluster Autoscaler, Helm installation with IAM, NodePool and EC2NodeClass with instance constraints, automatic consolidation, and decision criteria for each approach.