PHP2Shell: Providing transparency on our course of actions.

On 21 October, WoodWing took all Studio environments in WoodWing Cloud offline as a precaution against two critical PHP vulnerabilities. We know how disruptive that was, especially for those of you working against print deadlines.

To give you more background on the steps we took, Ruben van der Kolk, our CISO, and Ross Paterson would like to take you through the incident, hour by hour, in an on-demand video recording.

We’ll cover:

• Why we took Studio offline: the vulnerabilities allowed remote code execution, no patch existed yet, and attacks had already been reported.
• Why the public notice went out before we called you, and how we followed up with personal contact.
• How IP allowlisting got customers with deadlines back to work, hours before the fix could be applied.
• Why the fix took until 01:06 CEST the following morning, and how we then patched every Studio 10.69 environment the same night.
• What our security investigation has found so far: no evidence that the vulnerabilities were exploited or that customer data was accessed.

▶ Watch the recording (23 minutes)

If you have any questions after watching the video, please create a ticket through the WoodWing Help Center or contact your Customer Success Manager.