CONNECT WITH US
Tech

Tech

PHP Vulnerabilities Could Put Much of the Internet at Risk, Experts Warn

CNET - Tech logo

Published on

Add as a preferred source on Google
PHP Vulnerabilities Could Put Much of the Internet at Risk, Experts Warn

Up to 70% of all the websites on the internet could be affected.

An agency that monitors the PHP programming language issued a severe warning on Tuesday that it had identified two major cybersecurity vulnerabilities. Fixes should have been deployed on Wednesday at 10 a.m. ET, but security experts are urging website administrators to take immediate notice and precautions.

The warnings are unusually severe, rated 9.2 out of 10. While we don’t have many details about the specifics of the vulnerabilities yet, the concern is that the exploit could be used by bad actors to hack into websites.

PHP is a free, open-source programming language that much of the web is built on. According to the Wall Street Journal, 70% of the world’s websites could be vulnerable. Security agencies around the globe, including the US National Security Agency and the UK’s National Cyber Security Centre, are urging website administrators to install the updates or take their sites offline until they’re able to patch them.

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or…

Cloudflare’s chief technology officer Dane Knecht said Wednesday morning that the company has deployed a fix to its firewall. Cybersecurity company watchTowr says it was able to successfully reproduce one of the exploits. “As expected, watchTowr Intel is already observing in-the-wild exploitation of the latest PHP vulnerabilities,” Jake Knott, head of threat intelligence, said via email on Wednesday morning.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.