The PHP Foundation acknowledged that indecision and a lack of resources delayed the fix for a critical vulnerability first identified in 2024, calling it a “structural failure.” Two related vulnerabilities could allow unauthenticated attackers to execute code on vulnerable servers, prompting the release of emergency patches. Governments and organizations worldwide temporarily took websites offline as a precaution, including in the Netherlands, Finland, France, Germany and Australia. Blockchain security firm SlowMist identified 793 domains directly using PHP among 1,488 assessed, while OpenAI released a tool to help website operators detect vulnerable PHP versions and find applicable updates.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
