Security· ★★★★· bearish·

PHP Foundation calls delayed critical patch a structural failure

  • —SlowMist found PHP traces on 793 of 1,488 crypto domains checked
  • —Cardano temporarily closed its members section to assess risk
  • —Coinbase and BitGo said they found no vulnerable PHP instances
  • —The flaw was first spotted in 2024 and re-reported on August 11
Why it matters: Crypto exchanges, DeFi platforms and wallet developers must audit infrastructure and patch PHP to prevent remote code execution attacks.
#ADA
Source: CryptoHamster
More on this
Security · yesterday
BitGo says its platform is unaffected by critical PHP vulnerabilities
 Security · yesterday
Ledger CTO warns of critical flaws in PHP, Node.js and TLS certificates
 Security · yesterday
SlowMist flags two critical PHP vulnerabilities with CVSS 9.2