The Register (1 hour ago)
Cloudflare reports millions of exploit attempts, while Amazon spotted attackers trying their luck four days before patches landed
Read the full story on The Register.
PHP maintainers have released two critical vulnerabilities: PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.
Security researchers at Amazon Threat Intelligence say attackers began targeting the PHP2Shell flaws four days before security patches were released on Wednesday.
Hackers have made millions of attempts to exploit PHP2Shell since Wednesday’s disclosure, Cloudflare’s chief executive, Matthew Prince, said on X. Officials in Germany, the Netherlands and Japan say they have not seen one succeed. Some stats on #php2shell.
The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.
Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.
Everything you need to know about PHP2Shell in terms of what it is, and what this security flaw means for the average person browsing the web.
GPU chief doesn’t want to hear about job losses or the end of human civilization
AI agents did the dirty work, with hackers gaining privileged access in some environments in under three hours
Mars Express could support MMX’s 2027 arrival as another ‘last ever’ extension keeps old spacecraft in flight
Misaligned incentives led to an intractable argument
72 active sources
27 Turkish · 45 English
All sources
