Security· ★★★· bearish·

CISA warns hackers are exploiting critical PHP flaws, gives federal agencies three days to patch

  • —PHP2Shell flaws allow unauthenticated remote access to vulnerable servers
  • —CISA ordered federal civilian agencies to patch within three days
  • —PHP powers about 70% of internet-facing servers, per the report
  • —Patches shipped less than a week ago; some sites went offline to update
Why it matters: The flaw sits in infrastructure underpinning many crypto services and wallets, and attackers are already exploiting it in the wild.
Source: DiarioBitcoin
More on this
Security · Oct 22
PHP Foundation calls delayed critical patch a structural failure
 Security · Oct 9
Hacker claims theft of data on 30,000 clients of French agency ASP
 Regulation · Oct 23
US bans DeepSeek at federal agencies, Swiss-Asia crypto ties deepen