Security· ★★★★· bearish·

Bloomberg: Hackers Exploited PHP Flaws Before Disclosure, 22.6M Instances Exposed

  • —Exploitation began October 17, before the flaws were disclosed on October 22
  • —Palo Alto Networks found over 22.6 million exposed instances worldwide
  • —Wiz says the flaw is over a decade old and may affect 70% of the internet
  • —NCC Group warns some vulnerable systems may already be compromised or backdoored
Why it matters: The flaw affects infrastructure used by crypto exchanges and payment gateways, raising the risk of new breaches and fund theft.
Source: PANews
More on this
Security · 14:04
Binance tightens security after PHP vulnerability disclosure
 Security · Oct 7
Base vault's $6M exploit exposes disclosure gap: Immunefi
 Security · 23:11
PHP, Node.js and LiteLLM flaws spark fears of global security fallout