PHP attacks trigger an urgent inventory and patch deadline
Daily Cyber News: PHP attacks trigger an urgent inventory and patch deadline
Organizations running PHP face active exploitation attempts against two newly disclosed security issues. Federal civilian agencies were ordered to patch by Thursday, and other organizations were told to identify every PHP system and update it. Thousands of failed attack attempts have been reported, although successful exploitation and potential victims haven’t been confirmed.
Key context: PHP supports a large share of websites, which makes incomplete inventories a serious exposure.
Additional detail: The larger lesson is that widely deployed software creates systemic risk when organizations don’t know which versions they run or who owns them.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, active exploitation, firewall, attacks, trigger, urgent, inventory, patch.
