Security News Even after PHP2Shell, blast radius matters more than a CVSS score BleepingComputer Daniel Bender 28 Oct 2026 Share PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the access of service accounts, API keys, and AI agents is just as important as fixing vulnerabilities to reduce the damage from a breach.