Critical PHP Vulnerabilities Threaten Global Web Infrastructure and Legacy Services
A critical security flaw in the PHP programming language, dubbed 'PHP2Shell,' has emerged, threatening up to 70% of the internet. The vulnerability affects nearly 20 years of PHP versions, including many that are no longer supported. This has forced major platforms like Wikipedia, DeviantArt, and 4chan to take precautions, while some government agencies in the Netherlands and Finland have taken sites offline to mitigate risk. The exploit's severity is amplified by AI advancements; security firm Wiz notes that while the bug was historically difficult to weaponize, powerful AI models have made it easily exploitable. Cloudflare reported a massive surge in attack attempts, jumping from thousands to millions within hours of disclosure. For legacy services and older mobile games unable to update their tech stacks, this vulnerability poses an existential threat, potentially leading to permanent shutdowns.
Tickers: $NET
Topics: cybersecurity exploit data security internet infrastructure risk PHP vulnerability
Read the full article at The Verge
Part of the story Critical PHP Vulnerabilities Threaten Global Web Infrastructure and Legacy Services (3 articles)