News

U.S. Cyber Agency Warns of Active Exploitation of Critical PHP Bugs

A U.S. government cyber agency has warned that hackers are actively exploiting critical vulnerabilities in PHP, the widely used server-side web programming language.

PHP is reportedly used in 70% of web software, giving weaknesses in the platform broad potential reach. The warning indicates that attackers have found a way to exploit the bugs and that the vulnerabilities present an immediate security risk rather than remaining a theoretical concern.

Organizations running PHP-based applications should treat the warning as a prompt to review the advisory, determine whether their systems are affected, and apply available security updates or mitigations.

Sources