Business & FinanceBreaking NewsBreakingLatest News
Two Critical PHP Flaws Trigger Global Alert; Millions of Services Face Cyber Risk
Sentiment: NeutralHigh Priority
What Happened?
Two critical vulnerabilities in PHP have raised a cybersecurity alert, potentially exposing millions of internet-facing services to remote code execution risks. PHP has advised users to disable a specific feature to mitigate these risks.
Key points
- Two critical PHP vulnerabilities allow remote code execution without authentication.
- PHP advised users to disable the session upload progress feature temporarily.
- Censys identified approximately 36.7 million internet-facing services at risk.
- India ranks ninth globally with 53,400 services displaying PHP information.
- 73% of PHP package installations are on internet-facing assets, increasing risk.
- 167 million PHP package installations were found across 12,000 organizations.
Key insights
- Organizations relying on PHP-based applications may face urgent security risks.
- The widespread use of PHP increases the potential impact of these vulnerabilities.
- Companies using outdated PHP versions are particularly at risk and need to upgrade.
Why it matters
The vulnerabilities could expose millions of services to cyberattacks, affecting businesses and users globally.
Tags
Entities
PHP· TechnologyFortinet· OrganizationCloudSEK· OrganizationIndia· Country
Source
Times of India
