Security· ★★★· bearish·

CZ Warns Crypto Users as Critical PHP Flaws Threaten Websites

  • —The two CVEs were rated 9.2 and details leaked before the official release
  • —Exploitation was confirmed in the wild soon after disclosure; WAFs were enabled early
  • —BNB Chain and PancakeSwap said they do not use PHP and user funds are safe
  • —NSA and FBI advised taking systems offline if patching is not immediate
Why it matters: The flaws affect infrastructure used by many crypto exchanges and payment gateways, raising the risk of credential theft and fund loss.
#BNB#CAKE
Source: CryptoPotato
More on this
Security · 05:42
Critical PHP2Shell flaw threatens crypto exchanges and payment gateways
 Security · 18:24
Theori reproduces critical PHP2Shell flaw in PHP engine, issues emergency guidance
 Security · 02:15
Over 10 governments warn of PHP flaw threatening cyberspace