curated news Krebs on Security infra

Widespread PHP Flaw May Cause Many Site Outages Today

// summary

A pair of PHP vulnerabilities affecting many websites is being actively exploited and can allow attackers to take control of servers.

// from the source

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws, and that these critical bugs are already being exploited in the wild.