Dan Goodin / Ars Technica: An unconfirmed report claims PHP2Shell enables RCE on PHP sites; watchTowr says the exploit allegedly affects all versions since PHP 5, released in 2004 — Website admins, brace yourselves.