IT FUN PEOPLE Offers PHP2Shell Response Solution to Strengthen Cybersecurity in the AI Era

- Integrated support from vulnerability discovery through impact assessment, remediation, and verification

- Support for WAF, DDoS protection, and Zero Trust security infrastructure through collaboration with Cloudflare

- Applying technical expertise to narrow security capability gaps and strengthen social contribution initiatives

IT FUN PEOPLE (President & CEO Seiji Otaki, hereinafter "IFP") announced that it is providing a security response solution to address emerging cyber threats, including the recently disclosed PHP remote code execution vulnerabilities known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619). The solution supports the entire response process, from vulnerability discovery and assessment of actual impact to selection of countermeasures, implementation, and verification of results.

Advances in AI and the automation of attack tools are lowering the barriers to launching cyberattacks. Attackers use a range of methods to infiltrate corporate systems, exploiting not only software vulnerabilities but also legitimate administrative privileges and third-party maintenance access, while bypassing logging and security monitoring mechanisms.

According to IFP, reviewing vulnerability assessment results alone is not sufficient to determine an organization's actual security posture. Organizations such as healthcare institutions, which handle sensitive personal information while outsourcing system administration, also need to verify who manages their systems, how access privileges are controlled, and whether logging and monitoring are operating effectively. If adequate logging and monitoring are absent or can be bypassed, a routine inspection report indicating no issues may not establish whether an intrusion has occurred.

James Kim, Director of IFP, said, "Security is not achieved simply by submitting and reviewing formal inspection reports. The greatest danger is not the discovery of a vulnerability, but a prolonged situation in which an organization believes it is safe without even realizing that an intrusion has occurred."

He added, "Businesses need a framework that continuously verifies their actual security posture and enables a rapid response when signs of suspicious activity emerge. Security should be evaluated by an organization's practical ability to detect threats and respond to them."

IFP has developed its security technologies and operational expertise through services including its enterprise security platform C-Secure and website vulnerability assessment service Total Scan. The company has also submitted security reports to businesses and organizations including SBI Group, the Japan Credit Card Association, and hosting providers in Japan, reporting vulnerabilities and providing technical information to support remediation.

Through its collaboration with Cloudflare, IFP also supports the adoption of security technologies including web application firewalls (WAF), DDoS protection, and Zero Trust access controls. The company aims to help businesses with limited specialist resources build and manage security infrastructure suited to their operating environments.

IFP regards these security support activities as part of its social contribution as a technology company. Drawing on expertise accumulated across its payments, security, and cloud businesses, the company plans to help narrow security capability gaps associated with business size and technical resources, while contributing to safe and sustainable IT operations.

Businesses facing difficulties with security assessments or incident response can request a consultation through IFP's official website. Even organizations that do not have a clear understanding of their system architecture or management arrangements can start with their current situation and work with IFP to identify what needs to be checked and how to proceed.