Attackers are exploiting zero-day flaws in widely used PHP. Patches are due out later today. The attacks are a concern because so many websites, from Wikipedia, to WordPress, to numerous e-commerce stores, run PHP.
What's happening:
—Details on 2x zero days leaked Tuesday in advance of Thursday scheduled patch release
—Cloudflare now reports seeing active attacks; it's updated web application firewall to help block known exploits
—Total fallout could lead to "a lot of smoking websites" and extend to Internet of Things devices that run PHP for their web interface, one cybersecurity expert warns
—Britain's National Cyber Security Centre advises all PHP-using organizations to find out where, and immediately patch internet-facing systems once patches are released, or take the systems offline
—Dutch cybersecurity agency has proactively taken its own website offline, pending patches
—Exactly which PHP versions are vulnerable and which ones are getting patches remains to be seen; outdated versions of PHP remain in wide use
Full report: https://www.databreachtoday.com/attackers-exploit-leaked-zero-day-flaws-in-widely-used-php-a-33161
www.databreachtoday.comAttackers Exploit Leaked Zero-Day Flaws in Widely Used PHPAttackers are exploiting one or more zero-day vulnerabilities in PHP after details of the bugs leaked in advance of patches being released. The flaws can be