New PHP exploit code posted online sparks global security scramble
Attack code for recently disclosed PHP vulnerabilities has been released on the internet, prompting organizations worldwide to rush patching efforts.
An exploit kit for newly uncovered weaknesses in PHP was posted online on Wednesday, making it possible for a broad range of actors to exploit the flaws. Governments and businesses across the globe are now working to harden their web infrastructures, but the sheer number of legacy PHP servers that receive little or no maintenance poses a persistent risk. Security specialist Marcus Murray likened the situation to leaving a key to web services exposed, emphasizing the need for rapid updates.
He noted that many firms take more than 40 days to implement security fixes, and some never do, leaving the vulnerability open for an extended period. While the sheer scale of affected sites means the problem will linger, ongoing AI-driven detection and patching are expected to gradually improve the situation.
Why it matters
The publicly released PHP exploit could expose personal data and disrupt countless web services worldwide.
How this story developed
- Oct 12 Cyberattack disrupts refrigeration systems at Intermarché and Coopérative U stores
- Oct 12 The attack specifically exploits outdated Danfoss software versions older than version 4.
- Oct 14 Additional reports note that stores of Monoprix, Leclerc and Carrefour also experienced temperature overrides.
- Oct 21 PHP maintainers announced they will release emergency updates for two high-severity flaws, each rated 9.2/10, in just over a day.
- Oct 21 EU’s CERT‑EU recommended that organisations unable to patch consider taking vulnerable sites offline.
- Oct 22 German state portals, including Berlin and Hessen, were restored after applying the emergency PHP patches.
In this story
Related stories
15 in this thread