US Cybersecurity Agencies Urge Immediate Fix for Bug Threatening Millions of Websites

'Craziest day in cyber security in a long time,' said Shopify CEO Tobias Lutke, as millions of attempts to exploit the flaws have already been detected.
US Cybersecurity Agencies Urge Immediate Fix for Bug Threatening Millions of Websites

U.S. cybersecurity agencies, including the NSA and CISA, have issued urgent warnings about critical vulnerabilities in PHP, a programming language used by approximately 70 percent of global websites. Organizations are strongly advised to install security patches immediately to prevent hackers from exploiting these flaws, known as “PHP2Shell,” and gaining control of web servers. The NSA emphasized the seriousness of these risks, stating they necessitate immediate patching across all U.S. government departments and agencies.

  • Critical vulnerabilities have been identified in the PHP programming language.
  • PHP is used by approximately 70 percent of the world’s websites.
  • The NSA and CISA have urged organizations to install security patches immediately.
  • These vulnerabilities, nicknamed “PHP2Shell,” could allow hackers to take control of web servers.
  • The NSA highlighted the serious risks, requiring immediate patching for U.S. government departments and agencies.
Write a comment