Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.
A widespread flaw in the PHP programming language could cause numerous website outages today. Nearly 70% of websites need to update their core software to fix two vulnerabilities that allow attackers to gain full control over affected servers. These critical bugs are already being exploited in the wild, with Cloudflare detecting exploitation and implementing protective measures.
Researchers from Wiz consider this one of the most severe vulnerabilities in PHP, if not software history. The flaws affect all web servers running PHP 5.4 or later, and it is likely that organizations will struggle to patch them for some time.
Written by urgent.news from KrebsOnSecurity's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
