Up to 70% of all the websites on the internet could be affected.
An agency that monitors the PHP programming language issued a severe warning on Tuesday that it had identified two major cybersecurity vulnerabilities. Fixes should have been deployed on Wednesday at 10 a.m. ET, but security experts are urging website administrators to take immediate notice and precautions.
The warnings are unusually severe, rated 9.2 out of 10. While we don’t have many details about the specifics of the vulnerabilities yet, the concern is that the exploit could be used by bad actors to hack into websites.
PHP is a free, open-source programming language that much of the web is built on. According to the Wall Street Journal, 70% of the world’s websites could be vulnerable. Security agencies around the globe, including the US National Security Agency and the UK’s National Cyber Security Centre, are urging website administrators to install the updates or take their sites offline until they’re able to patch them.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or…
Cloudflare’s chief technology officer Dane Knecht said Wednesday morning that the company has deployed a fix to its firewall. Cybersecurity company watchTowr says it was able to successfully reproduce one of the exploits. “As expected, watchTowr Intel is already observing in-the-wild exploitation of the latest PHP vulnerabilities,” Jake Knott, head of threat intelligence, said via email on Wednesday morning.
Source link







