Security· ★★★· bearish·

CZ Warns Unpatched PHP Websites Could Expose Crypto Users

  • —Both PHP flaws are rated 9.2 out of 10 and allow unauthenticated remote code execution
  • —Patches for versions 8.2.35, 8.3.36, 8.4.27 and 8.5.12 shipped October 21, a day early
  • —No confirmed attacks on crypto exchanges or user wallets have been linked to the bugs
  • —PHP Foundation criticized Chainguard for releasing patched images six hours before disclosure
Why it matters: Compromised PHP sites can alter login pages and inject wallet-connection prompts, raising phishing risk for crypto holders.
Source: The Coin Republic
More on this
Security · 01:44
NSA tells unpatched websites to go offline over two critical PHP flaws
 Security · yesterday
CertiK warns crypto trading bots and exchange apps may stay exposed after eMudhra certificate block
 Security · Oct 2
Unpatched Eclair Lightning nodes crash on every restart, researcher warns