News
Critical PHP bugs let attackers take over servers
Two critical vulnerabilities in PHP, used by about 70% of websites, enable attackers to hijack servers without authentication. Fixes were released after leaks, but attacks occurred beforehand, prompting government sites in Finland, the Netherlands, and France to go offline. Over 884,000 servers still run vulnerable PHP 8.1 or older, posing risks especially for crypto users via compromised sites that can drain wallets.