Two critical vulnerabilities, collectively known as “PHP2Shell,” were discovered in PHP, an open-source language widely used to power websites and online applications. They can enable attackers to execute malicious code remotely on affected servers, potentially granting access to files and databases. The National Security Agency urged organizations to apply security updates quickly or take vulnerable systems offline, while the FBI, Singapore, the United Kingdom, Australia, Canada and the European Union issued similar alerts. Amazon detected exploitation attempts before the public disclosure through its MadPot system, while Google and OpenAI used artificial intelligence to uncover, analyze and patch the flaws. PHP’s development team released security updates, and Cloudflare deployed additional protections.
Source: Read the original article
