From SiliconANGLE · Maria Deutscher · · 1m 20s
Critical PHP vulnerabilities send organizations scrambling to secure their systems
PHP security flaws force 70% of websites to patch systems amid active attacks.
In brief
PHP security flaws force 70% of websites to patch systems amid active attacks. Critical PHP vulnerabilities affect up to 70% of websites, prompting immediate security patches and active exploitation attempts. Originally reported by SiliconANGLE.
PHP security patches released
PHP maintainers released patches for two critical vulnerabilities affecting up to 70% of websites.
Cybersecurity agencies urge shutdown
National Security Agency and other agencies advise organizations to shut down affected systems while implementing updates.
Active exploitation attempts
Cloudflare and Fastly report hackers are already trying to exploit the PHP2Shell vulnerabilities.
Fastly's security alert
Fastly Chief Product Officer Kelly Shortridge states the vulnerability is not theoretical and shows active attacks.
PHP2Shell technical details
PHP2Shell exploits allow hackers to deploy malicious code on vulnerable servers within seconds.
Historical vulnerability issue
PHP2Shell has been present in PHP for decades but researchers believed it couldn't be exploited until August.
Industry response timeline
Security firms formed an industry group that produced over 10,000 lines of code and fixes across 20 PHP files.
Patch leak and rushed release
The vulnerability was leaked on a developer forum, leading PHP maintainers to rush out fixes today.
Here's the gist
Critical PHP vulnerabilities affect up to 70% of websites, prompting immediate security patches and active exploitation attempts.
