RightSignal
8 of 13

Your RightSignal

Security3 min

Attackers exploited two flaws in the PHP web language days before they were disclosed

Researchers from Calif.io, Wiz, OpenAI and Quarkslab disclosed two flaws in PHP, known together as php2shell. They affect web servers running PHP 5.4 or later. Specially crafted web requests can make PHP misuse memory after an error, which can crash the server, leak data or run the attacker's code. Amazon says it saw exploitation on October 17, before public disclosure, and Ars Technica reports that attackers had a four-day head start. Cloudflare says details leaked early. It added firewall protection on all its plans about 9 hours before disclosure.

Do anything? If you run PHP, update the PHP software itself; fixing your site's code or plugins is not enough. If a host manages PHP for you, ask them to patch.
Confirmed and patchedCloudflare