PHP Rushes Emergency Patches as Major Vulnerability Leaked

The PHP programming language is preparing to release two critical emergency patches to address vulnerabilities that could allow for remote code execution on affected websites. This proactive measure follows reports of a potential "PHP2Shell" exploit, which, if confirmed, could pose a significant threat to numerous online platforms.

In parallel, the internet is on high alert due to the discovery of eight compromised Transport Layer Security (TLS) certificates. These compromised intermediate certificates could enable malicious actors to issue fraudulent web credentials for any server, undermining the trust and security of online communications. The discovery has prompted widespread concern and a call for immediate action to revoke and replace the compromised certificates.

14 stories · 7 sources

#cyber #ransomware #security

Other digests