RightSignal
10 of 13

Your RightSignal

Security2 min

US cyber agency warns attackers are exploiting critical flaws in the PHP web language

The US government's cyber agency warns that hackers are exploiting critical bugs in PHP, the software behind much of the web. Cloudflare says the two flaws, known together as php2shell, came during a hard week for web security. It added firewall rules against them on all plans, including Free. It also launched a paid challenge for researchers who can get past those rules, and stresses that its firewall is not a substitute for patching.

Do anything? If you run a website on PHP, install the latest PHP security updates now. If you don't, there is nothing to do.
ConfirmedTechCrunch