South Korea readies cross-ministry response to PHP vulnerabilities
- —KISA raised the cyber threat alert from "interest" to "caution" at noon on Oct. 23
- —The flaws allow unauthenticated remote code execution and webshell installation
- —KISA learned of the issue at 11 p.m. on Oct. 21 and issued guidance 20 minutes later
- —KISA has not yet determined how many organizations have patched
Why it matters: PHP underpins a large share of websites and online stores, so mass exploitation could hit crypto services and exchanges.
Source: Digital Today