The National Security Agency issued a bulletin advising organizations to take systems offline until the php2shell vulnerability is patched